./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 63182f13 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fa0eab3945757815cbe114f72b31b9c97b3f41e20a7d5f245c817ae82afdf9aa --- Real Ultimate output --- This is Ultimate 0.2.1-dev-63182f1 [2021-11-13 17:31:21,897 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-13 17:31:21,899 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-13 17:31:21,953 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-13 17:31:21,954 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-13 17:31:21,959 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-13 17:31:21,961 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-13 17:31:21,965 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-13 17:31:21,968 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-13 17:31:21,975 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-13 17:31:21,976 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-13 17:31:21,978 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-13 17:31:21,978 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-13 17:31:21,981 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-13 17:31:21,984 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-13 17:31:21,991 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-13 17:31:21,994 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-13 17:31:21,995 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-13 17:31:21,998 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-13 17:31:22,005 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-13 17:31:22,008 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-13 17:31:22,009 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-13 17:31:22,012 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-13 17:31:22,013 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-13 17:31:22,019 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-13 17:31:22,020 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-13 17:31:22,020 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-13 17:31:22,022 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-13 17:31:22,023 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-13 17:31:22,024 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-13 17:31:22,025 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-13 17:31:22,026 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-13 17:31:22,028 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-13 17:31:22,029 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-13 17:31:22,031 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-13 17:31:22,031 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-13 17:31:22,032 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-13 17:31:22,032 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-13 17:31:22,033 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-13 17:31:22,034 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-13 17:31:22,034 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-13 17:31:22,035 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-13 17:31:22,076 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-13 17:31:22,079 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-13 17:31:22,080 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-13 17:31:22,080 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-13 17:31:22,081 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-13 17:31:22,081 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-13 17:31:22,082 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-13 17:31:22,082 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-13 17:31:22,082 INFO L138 SettingsManager]: * Use SBE=true [2021-11-13 17:31:22,083 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-13 17:31:22,084 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-13 17:31:22,084 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-13 17:31:22,084 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-13 17:31:22,084 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-13 17:31:22,085 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-13 17:31:22,085 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-13 17:31:22,085 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-13 17:31:22,085 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-13 17:31:22,085 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-13 17:31:22,086 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-13 17:31:22,086 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-13 17:31:22,086 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-13 17:31:22,086 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-13 17:31:22,087 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-13 17:31:22,087 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-13 17:31:22,087 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-13 17:31:22,087 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-13 17:31:22,088 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-13 17:31:22,088 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-13 17:31:22,089 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-13 17:31:22,090 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-13 17:31:22,090 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-13 17:31:22,090 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-13 17:31:22,091 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-13 17:31:22,091 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fa0eab3945757815cbe114f72b31b9c97b3f41e20a7d5f245c817ae82afdf9aa [2021-11-13 17:31:22,416 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-13 17:31:22,438 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-13 17:31:22,440 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-13 17:31:22,442 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-13 17:31:22,443 INFO L275 PluginConnector]: CDTParser initialized [2021-11-13 17:31:22,444 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c [2021-11-13 17:31:22,507 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/data/29dcb50d5/dc16ac09547e4717bb16d13eb37074e2/FLAGedc6ece13 [2021-11-13 17:31:23,060 INFO L306 CDTParser]: Found 1 translation units. [2021-11-13 17:31:23,061 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c [2021-11-13 17:31:23,075 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/data/29dcb50d5/dc16ac09547e4717bb16d13eb37074e2/FLAGedc6ece13 [2021-11-13 17:31:23,331 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/data/29dcb50d5/dc16ac09547e4717bb16d13eb37074e2 [2021-11-13 17:31:23,335 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-13 17:31:23,339 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-13 17:31:23,343 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-13 17:31:23,343 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-13 17:31:23,346 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-13 17:31:23,347 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:23,351 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@237c4d41 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23, skipping insertion in model container [2021-11-13 17:31:23,351 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:23,358 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-13 17:31:23,408 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-13 17:31:23,690 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c[11292,11305] [2021-11-13 17:31:23,812 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-13 17:31:23,824 INFO L203 MainTranslator]: Completed pre-run [2021-11-13 17:31:23,868 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c[11292,11305] [2021-11-13 17:31:23,914 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-13 17:31:23,941 INFO L208 MainTranslator]: Completed translation [2021-11-13 17:31:23,942 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23 WrapperNode [2021-11-13 17:31:23,942 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-13 17:31:23,944 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-13 17:31:23,944 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-13 17:31:23,944 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-13 17:31:23,952 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:23,981 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:24,024 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-13 17:31:24,025 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-13 17:31:24,026 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-13 17:31:24,026 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-13 17:31:24,035 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:24,037 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:24,041 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:24,053 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:24,067 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:24,072 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:24,077 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:24,081 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-13 17:31:24,082 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-13 17:31:24,082 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-13 17:31:24,082 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-13 17:31:24,083 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (1/1) ... [2021-11-13 17:31:24,091 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-13 17:31:24,102 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 17:31:24,114 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-13 17:31:24,127 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-13 17:31:24,170 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-13 17:31:24,170 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-13 17:31:24,170 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-13 17:31:24,171 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-13 17:31:24,171 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-13 17:31:24,171 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-13 17:31:24,171 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-13 17:31:24,171 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-11-13 17:31:24,171 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-11-13 17:31:24,172 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-13 17:31:24,172 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-13 17:31:24,172 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-13 17:31:24,172 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-13 17:31:24,172 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-11-13 17:31:24,173 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-11-13 17:31:24,173 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-13 17:31:24,173 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-13 17:31:24,173 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-13 17:31:24,173 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-13 17:31:24,174 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-13 17:31:24,174 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-13 17:31:24,174 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-13 17:31:25,113 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-13 17:31:25,113 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-13 17:31:25,115 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 05:31:25 BoogieIcfgContainer [2021-11-13 17:31:25,116 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-13 17:31:25,118 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-13 17:31:25,118 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-13 17:31:25,122 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-13 17:31:25,122 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.11 05:31:23" (1/3) ... [2021-11-13 17:31:25,123 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3de9a18 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.11 05:31:25, skipping insertion in model container [2021-11-13 17:31:25,123 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:23" (2/3) ... [2021-11-13 17:31:25,124 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3de9a18 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.11 05:31:25, skipping insertion in model container [2021-11-13 17:31:25,124 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 05:31:25" (3/3) ... [2021-11-13 17:31:25,125 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product56.cil.c [2021-11-13 17:31:25,131 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-13 17:31:25,131 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-13 17:31:25,183 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-13 17:31:25,190 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-13 17:31:25,190 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-13 17:31:25,210 INFO L276 IsEmpty]: Start isEmpty. Operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-11-13 17:31:25,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-11-13 17:31:25,219 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:25,220 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:25,220 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:25,226 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:25,226 INFO L85 PathProgramCache]: Analyzing trace with hash -1548791886, now seen corresponding path program 1 times [2021-11-13 17:31:25,236 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:25,236 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1565304830] [2021-11-13 17:31:25,236 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:25,237 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:25,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:25,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-13 17:31:25,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:25,491 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:25,492 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:25,492 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1565304830] [2021-11-13 17:31:25,493 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1565304830] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:25,493 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:25,494 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-13 17:31:25,495 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [34797800] [2021-11-13 17:31:25,496 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:25,501 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-13 17:31:25,501 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:25,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-13 17:31:25,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-13 17:31:25,532 INFO L87 Difference]: Start difference. First operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-13 17:31:25,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:25,571 INFO L93 Difference]: Finished difference Result 205 states and 280 transitions. [2021-11-13 17:31:25,572 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-13 17:31:25,573 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-11-13 17:31:25,574 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:25,585 INFO L225 Difference]: With dead ends: 205 [2021-11-13 17:31:25,585 INFO L226 Difference]: Without dead ends: 98 [2021-11-13 17:31:25,590 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-13 17:31:25,594 INFO L933 BasicCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.00ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.17ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.00ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:25,596 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 2.17ms Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.00ms Time] [2021-11-13 17:31:25,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2021-11-13 17:31:25,641 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 98. [2021-11-13 17:31:25,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 72 states have (on average 1.3194444444444444) internal successors, (95), 82 states have internal predecessors, (95), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-11-13 17:31:25,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2021-11-13 17:31:25,650 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 25 [2021-11-13 17:31:25,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:25,650 INFO L470 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2021-11-13 17:31:25,651 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-13 17:31:25,651 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2021-11-13 17:31:25,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-11-13 17:31:25,658 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:25,658 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:25,659 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-13 17:31:25,659 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:25,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:25,663 INFO L85 PathProgramCache]: Analyzing trace with hash 1194219528, now seen corresponding path program 1 times [2021-11-13 17:31:25,663 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:25,664 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [835683159] [2021-11-13 17:31:25,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:25,665 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:25,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:25,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-13 17:31:25,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:25,806 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:25,806 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:25,806 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [835683159] [2021-11-13 17:31:25,807 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [835683159] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:25,807 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:25,807 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-13 17:31:25,807 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [400897774] [2021-11-13 17:31:25,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:25,809 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-13 17:31:25,809 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:25,810 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-13 17:31:25,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-13 17:31:25,811 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-13 17:31:25,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:25,831 INFO L93 Difference]: Finished difference Result 156 states and 204 transitions. [2021-11-13 17:31:25,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-13 17:31:25,832 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-11-13 17:31:25,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:25,834 INFO L225 Difference]: With dead ends: 156 [2021-11-13 17:31:25,834 INFO L226 Difference]: Without dead ends: 89 [2021-11-13 17:31:25,835 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-13 17:31:25,837 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 17 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.47ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.74ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.71ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:25,838 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 208 Invalid, 1 Unknown, 0 Unchecked, 2.74ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 1.71ms Time] [2021-11-13 17:31:25,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2021-11-13 17:31:25,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2021-11-13 17:31:25,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 66 states have (on average 1.3333333333333333) internal successors, (88), 76 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-11-13 17:31:25,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 116 transitions. [2021-11-13 17:31:25,868 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 116 transitions. Word has length 26 [2021-11-13 17:31:25,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:25,869 INFO L470 AbstractCegarLoop]: Abstraction has 89 states and 116 transitions. [2021-11-13 17:31:25,869 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-13 17:31:25,869 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 116 transitions. [2021-11-13 17:31:25,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-11-13 17:31:25,871 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:25,872 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:25,872 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-13 17:31:25,872 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:25,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:25,873 INFO L85 PathProgramCache]: Analyzing trace with hash -72231615, now seen corresponding path program 1 times [2021-11-13 17:31:25,873 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:25,874 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [540043383] [2021-11-13 17:31:25,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:25,874 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:25,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:26,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-13 17:31:26,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:26,044 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:26,045 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:26,047 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [540043383] [2021-11-13 17:31:26,047 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [540043383] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:26,047 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:26,048 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-13 17:31:26,048 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [796079021] [2021-11-13 17:31:26,049 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:26,050 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-13 17:31:26,050 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:26,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-13 17:31:26,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-13 17:31:26,052 INFO L87 Difference]: Start difference. First operand 89 states and 116 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-13 17:31:26,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:26,132 INFO L93 Difference]: Finished difference Result 249 states and 331 transitions. [2021-11-13 17:31:26,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-13 17:31:26,133 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-11-13 17:31:26,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:26,136 INFO L225 Difference]: With dead ends: 249 [2021-11-13 17:31:26,136 INFO L226 Difference]: Without dead ends: 168 [2021-11-13 17:31:26,138 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-13 17:31:26,139 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 108 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 21.03ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 245 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 4.29ms SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 26.14ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:26,140 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [108 Valid, 245 Invalid, 5 Unknown, 0 Unchecked, 4.29ms Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 26.14ms Time] [2021-11-13 17:31:26,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2021-11-13 17:31:26,193 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 165. [2021-11-13 17:31:26,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 165 states, 120 states have (on average 1.3583333333333334) internal successors, (163), 139 states have internal predecessors, (163), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2021-11-13 17:31:26,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165 states to 165 states and 219 transitions. [2021-11-13 17:31:26,197 INFO L78 Accepts]: Start accepts. Automaton has 165 states and 219 transitions. Word has length 31 [2021-11-13 17:31:26,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:26,197 INFO L470 AbstractCegarLoop]: Abstraction has 165 states and 219 transitions. [2021-11-13 17:31:26,197 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-13 17:31:26,198 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 219 transitions. [2021-11-13 17:31:26,200 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-11-13 17:31:26,200 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:26,201 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:26,201 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-13 17:31:26,201 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:26,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:26,202 INFO L85 PathProgramCache]: Analyzing trace with hash 301498308, now seen corresponding path program 1 times [2021-11-13 17:31:26,202 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:26,202 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [151778764] [2021-11-13 17:31:26,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:26,203 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:26,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:26,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-13 17:31:26,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:26,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:26,316 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:26,316 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [151778764] [2021-11-13 17:31:26,317 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [151778764] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:26,317 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:26,317 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 17:31:26,317 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [944992310] [2021-11-13 17:31:26,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:26,318 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 17:31:26,319 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:26,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 17:31:26,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-13 17:31:26,320 INFO L87 Difference]: Start difference. First operand 165 states and 219 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-13 17:31:26,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:26,611 INFO L93 Difference]: Finished difference Result 477 states and 642 transitions. [2021-11-13 17:31:26,611 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-13 17:31:26,612 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-11-13 17:31:26,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:26,624 INFO L225 Difference]: With dead ends: 477 [2021-11-13 17:31:26,624 INFO L226 Difference]: Without dead ends: 320 [2021-11-13 17:31:26,630 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-13 17:31:26,636 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 84 mSDsluCounter, 447 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 166.24ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 574 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 8.30ms SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 213.65ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:26,640 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [87 Valid, 574 Invalid, 58 Unknown, 0 Unchecked, 8.30ms Time], IncrementalHoareTripleChecker [4 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 213.65ms Time] [2021-11-13 17:31:26,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 320 states. [2021-11-13 17:31:26,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 320 to 314. [2021-11-13 17:31:26,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 225 states have (on average 1.3466666666666667) internal successors, (303), 262 states have internal predecessors, (303), 56 states have call successors, (56), 32 states have call predecessors, (56), 32 states have return successors, (58), 34 states have call predecessors, (58), 56 states have call successors, (58) [2021-11-13 17:31:26,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 417 transitions. [2021-11-13 17:31:26,726 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 417 transitions. Word has length 34 [2021-11-13 17:31:26,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:26,727 INFO L470 AbstractCegarLoop]: Abstraction has 314 states and 417 transitions. [2021-11-13 17:31:26,728 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-13 17:31:26,728 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 417 transitions. [2021-11-13 17:31:26,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-11-13 17:31:26,738 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:26,739 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:26,739 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-13 17:31:26,739 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:26,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:26,740 INFO L85 PathProgramCache]: Analyzing trace with hash -393513024, now seen corresponding path program 1 times [2021-11-13 17:31:26,741 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:26,741 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2014456508] [2021-11-13 17:31:26,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:26,742 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:26,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:26,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-13 17:31:26,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:26,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-13 17:31:26,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:26,866 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:26,866 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:26,867 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2014456508] [2021-11-13 17:31:26,868 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2014456508] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:26,868 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:26,872 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 17:31:26,872 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [704799074] [2021-11-13 17:31:26,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:26,874 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 17:31:26,875 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:26,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 17:31:26,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-13 17:31:26,876 INFO L87 Difference]: Start difference. First operand 314 states and 417 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 17:31:27,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:27,359 INFO L93 Difference]: Finished difference Result 810 states and 1102 transitions. [2021-11-13 17:31:27,360 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-13 17:31:27,360 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-11-13 17:31:27,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:27,366 INFO L225 Difference]: With dead ends: 810 [2021-11-13 17:31:27,367 INFO L226 Difference]: Without dead ends: 504 [2021-11-13 17:31:27,368 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-13 17:31:27,373 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 128 mSDsluCounter, 161 mSDsCounter, 0 mSdLazyCounter, 254 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 283.83ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 303 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 8.39ms SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 254 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 360.15ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:27,373 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 268 Invalid, 303 Unknown, 0 Unchecked, 8.39ms Time], IncrementalHoareTripleChecker [49 Valid, 254 Invalid, 0 Unknown, 0 Unchecked, 360.15ms Time] [2021-11-13 17:31:27,375 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 504 states. [2021-11-13 17:31:27,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 504 to 490. [2021-11-13 17:31:27,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 490 states, 357 states have (on average 1.2913165266106443) internal successors, (461), 390 states have internal predecessors, (461), 72 states have call successors, (72), 60 states have call predecessors, (72), 60 states have return successors, (100), 62 states have call predecessors, (100), 72 states have call successors, (100) [2021-11-13 17:31:27,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 490 states to 490 states and 633 transitions. [2021-11-13 17:31:27,433 INFO L78 Accepts]: Start accepts. Automaton has 490 states and 633 transitions. Word has length 38 [2021-11-13 17:31:27,435 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:27,435 INFO L470 AbstractCegarLoop]: Abstraction has 490 states and 633 transitions. [2021-11-13 17:31:27,435 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 17:31:27,436 INFO L276 IsEmpty]: Start isEmpty. Operand 490 states and 633 transitions. [2021-11-13 17:31:27,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-11-13 17:31:27,440 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:27,440 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:27,441 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-13 17:31:27,441 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:27,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:27,442 INFO L85 PathProgramCache]: Analyzing trace with hash -1948781245, now seen corresponding path program 1 times [2021-11-13 17:31:27,442 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:27,442 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1585388052] [2021-11-13 17:31:27,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:27,443 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:27,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:27,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-13 17:31:27,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:27,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-13 17:31:27,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:27,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:27,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:27,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-13 17:31:27,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:27,617 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:27,617 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:27,617 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1585388052] [2021-11-13 17:31:27,617 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1585388052] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:27,617 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:27,617 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-13 17:31:27,618 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1074626993] [2021-11-13 17:31:27,618 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:27,618 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-13 17:31:27,618 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:27,619 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-13 17:31:27,619 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-13 17:31:27,619 INFO L87 Difference]: Start difference. First operand 490 states and 633 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-13 17:31:28,167 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:28,167 INFO L93 Difference]: Finished difference Result 1096 states and 1433 transitions. [2021-11-13 17:31:28,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-13 17:31:28,168 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2021-11-13 17:31:28,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:28,176 INFO L225 Difference]: With dead ends: 1096 [2021-11-13 17:31:28,176 INFO L226 Difference]: Without dead ends: 614 [2021-11-13 17:31:28,178 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-11-13 17:31:28,180 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 139 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 319 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 337.95ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 9.02ms SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 319 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 428.40ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:28,184 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [140 Valid, 281 Invalid, 377 Unknown, 0 Unchecked, 9.02ms Time], IncrementalHoareTripleChecker [58 Valid, 319 Invalid, 0 Unknown, 0 Unchecked, 428.40ms Time] [2021-11-13 17:31:28,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 614 states. [2021-11-13 17:31:28,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 614 to 600. [2021-11-13 17:31:28,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 600 states, 439 states have (on average 1.255125284738041) internal successors, (551), 472 states have internal predecessors, (551), 80 states have call successors, (80), 60 states have call predecessors, (80), 80 states have return successors, (128), 86 states have call predecessors, (128), 80 states have call successors, (128) [2021-11-13 17:31:28,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 600 states to 600 states and 759 transitions. [2021-11-13 17:31:28,253 INFO L78 Accepts]: Start accepts. Automaton has 600 states and 759 transitions. Word has length 54 [2021-11-13 17:31:28,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:28,254 INFO L470 AbstractCegarLoop]: Abstraction has 600 states and 759 transitions. [2021-11-13 17:31:28,254 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-13 17:31:28,254 INFO L276 IsEmpty]: Start isEmpty. Operand 600 states and 759 transitions. [2021-11-13 17:31:28,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-11-13 17:31:28,257 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:28,257 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:28,257 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-13 17:31:28,258 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:28,258 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:28,259 INFO L85 PathProgramCache]: Analyzing trace with hash -1526079419, now seen corresponding path program 1 times [2021-11-13 17:31:28,259 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:28,259 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [79534438] [2021-11-13 17:31:28,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:28,260 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:28,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-13 17:31:28,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-13 17:31:28,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:28,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-13 17:31:28,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,385 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:28,385 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:28,386 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [79534438] [2021-11-13 17:31:28,386 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [79534438] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:28,386 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:28,386 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 17:31:28,386 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [735634444] [2021-11-13 17:31:28,387 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:28,387 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 17:31:28,387 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:28,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 17:31:28,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-13 17:31:28,388 INFO L87 Difference]: Start difference. First operand 600 states and 759 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-13 17:31:28,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:28,820 INFO L93 Difference]: Finished difference Result 1226 states and 1603 transitions. [2021-11-13 17:31:28,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-13 17:31:28,821 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2021-11-13 17:31:28,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:28,825 INFO L225 Difference]: With dead ends: 1226 [2021-11-13 17:31:28,826 INFO L226 Difference]: Without dead ends: 634 [2021-11-13 17:31:28,828 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-11-13 17:31:28,828 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 145 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 233 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 289.41ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 146 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 289 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 4.92ms SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 233 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 352.55ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:28,829 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [146 Valid, 237 Invalid, 289 Unknown, 0 Unchecked, 4.92ms Time], IncrementalHoareTripleChecker [56 Valid, 233 Invalid, 0 Unknown, 0 Unchecked, 352.55ms Time] [2021-11-13 17:31:28,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 634 states. [2021-11-13 17:31:28,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 634 to 608. [2021-11-13 17:31:28,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 608 states, 447 states have (on average 1.250559284116331) internal successors, (559), 480 states have internal predecessors, (559), 80 states have call successors, (80), 60 states have call predecessors, (80), 80 states have return successors, (128), 86 states have call predecessors, (128), 80 states have call successors, (128) [2021-11-13 17:31:28,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 608 states to 608 states and 767 transitions. [2021-11-13 17:31:28,872 INFO L78 Accepts]: Start accepts. Automaton has 608 states and 767 transitions. Word has length 54 [2021-11-13 17:31:28,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:28,872 INFO L470 AbstractCegarLoop]: Abstraction has 608 states and 767 transitions. [2021-11-13 17:31:28,872 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-13 17:31:28,872 INFO L276 IsEmpty]: Start isEmpty. Operand 608 states and 767 transitions. [2021-11-13 17:31:28,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-11-13 17:31:28,874 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:28,874 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:28,874 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-13 17:31:28,874 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:28,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:28,875 INFO L85 PathProgramCache]: Analyzing trace with hash 963449543, now seen corresponding path program 1 times [2021-11-13 17:31:28,875 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:28,875 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [76078008] [2021-11-13 17:31:28,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:28,875 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:28,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-13 17:31:28,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-13 17:31:28,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:28,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-13 17:31:28,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:28,957 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:28,957 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:28,957 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [76078008] [2021-11-13 17:31:28,957 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [76078008] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:28,958 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:28,958 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 17:31:28,958 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1406125427] [2021-11-13 17:31:28,958 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:28,958 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 17:31:28,959 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:28,959 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 17:31:28,959 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-13 17:31:28,959 INFO L87 Difference]: Start difference. First operand 608 states and 767 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-13 17:31:29,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:29,591 INFO L93 Difference]: Finished difference Result 1740 states and 2285 transitions. [2021-11-13 17:31:29,591 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-13 17:31:29,592 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 54 [2021-11-13 17:31:29,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:29,600 INFO L225 Difference]: With dead ends: 1740 [2021-11-13 17:31:29,601 INFO L226 Difference]: Without dead ends: 1140 [2021-11-13 17:31:29,604 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-11-13 17:31:29,605 INFO L933 BasicCegarLoop]: 151 mSDtfsCounter, 356 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 301 mSolverCounterSat, 148 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 406.10ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 359 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 449 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 7.80ms SdHoareTripleChecker+Time, 148 IncrementalHoareTripleChecker+Valid, 301 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 494.70ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:29,605 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [359 Valid, 302 Invalid, 449 Unknown, 0 Unchecked, 7.80ms Time], IncrementalHoareTripleChecker [148 Valid, 301 Invalid, 0 Unknown, 0 Unchecked, 494.70ms Time] [2021-11-13 17:31:29,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1140 states. [2021-11-13 17:31:29,701 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1140 to 1128. [2021-11-13 17:31:29,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1128 states, 831 states have (on average 1.2166064981949458) internal successors, (1011), 882 states have internal predecessors, (1011), 150 states have call successors, (150), 134 states have call predecessors, (150), 146 states have return successors, (264), 152 states have call predecessors, (264), 150 states have call successors, (264) [2021-11-13 17:31:29,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1128 states to 1128 states and 1425 transitions. [2021-11-13 17:31:29,714 INFO L78 Accepts]: Start accepts. Automaton has 1128 states and 1425 transitions. Word has length 54 [2021-11-13 17:31:29,714 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:29,714 INFO L470 AbstractCegarLoop]: Abstraction has 1128 states and 1425 transitions. [2021-11-13 17:31:29,715 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-13 17:31:29,715 INFO L276 IsEmpty]: Start isEmpty. Operand 1128 states and 1425 transitions. [2021-11-13 17:31:29,717 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-11-13 17:31:29,718 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:29,718 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:29,718 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-13 17:31:29,718 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:29,719 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:29,719 INFO L85 PathProgramCache]: Analyzing trace with hash 1198586465, now seen corresponding path program 1 times [2021-11-13 17:31:29,719 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:29,719 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1234271450] [2021-11-13 17:31:29,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:29,720 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:29,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:29,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:29,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:29,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-13 17:31:29,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:29,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-11-13 17:31:29,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:29,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:29,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:29,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-13 17:31:29,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:29,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:29,828 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:29,829 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1234271450] [2021-11-13 17:31:29,829 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1234271450] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:29,829 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:29,829 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 17:31:29,829 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [186398950] [2021-11-13 17:31:29,829 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:29,830 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 17:31:29,830 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:29,831 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 17:31:29,831 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-13 17:31:29,831 INFO L87 Difference]: Start difference. First operand 1128 states and 1425 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-13 17:31:30,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:30,674 INFO L93 Difference]: Finished difference Result 2206 states and 2949 transitions. [2021-11-13 17:31:30,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-13 17:31:30,675 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2021-11-13 17:31:30,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:30,692 INFO L225 Difference]: With dead ends: 2206 [2021-11-13 17:31:30,692 INFO L226 Difference]: Without dead ends: 2204 [2021-11-13 17:31:30,694 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-11-13 17:31:30,695 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 500 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 268 mSolverCounterSat, 270 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 508.75ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 502 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 538 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 10.31ms SdHoareTripleChecker+Time, 270 IncrementalHoareTripleChecker+Valid, 268 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 613.01ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:30,695 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [502 Valid, 229 Invalid, 538 Unknown, 0 Unchecked, 10.31ms Time], IncrementalHoareTripleChecker [270 Valid, 268 Invalid, 0 Unknown, 0 Unchecked, 613.01ms Time] [2021-11-13 17:31:30,699 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2204 states. [2021-11-13 17:31:30,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2204 to 1715. [2021-11-13 17:31:30,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1715 states, 1258 states have (on average 1.2217806041335453) internal successors, (1537), 1354 states have internal predecessors, (1537), 239 states have call successors, (239), 173 states have call predecessors, (239), 217 states have return successors, (504), 238 states have call predecessors, (504), 239 states have call successors, (504) [2021-11-13 17:31:30,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1715 states to 1715 states and 2280 transitions. [2021-11-13 17:31:30,847 INFO L78 Accepts]: Start accepts. Automaton has 1715 states and 2280 transitions. Word has length 58 [2021-11-13 17:31:30,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:30,847 INFO L470 AbstractCegarLoop]: Abstraction has 1715 states and 2280 transitions. [2021-11-13 17:31:30,848 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-13 17:31:30,848 INFO L276 IsEmpty]: Start isEmpty. Operand 1715 states and 2280 transitions. [2021-11-13 17:31:30,853 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2021-11-13 17:31:30,853 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:30,853 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:30,853 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-13 17:31:30,853 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:30,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:30,854 INFO L85 PathProgramCache]: Analyzing trace with hash 187261637, now seen corresponding path program 1 times [2021-11-13 17:31:30,854 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:30,854 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1590317024] [2021-11-13 17:31:30,854 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:30,854 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:30,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:30,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:30,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:30,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-13 17:31:30,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:30,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-13 17:31:30,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:30,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-13 17:31:30,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:30,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:30,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:30,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-13 17:31:30,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:30,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-13 17:31:30,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:30,956 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 17:31:30,957 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:30,957 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1590317024] [2021-11-13 17:31:30,957 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1590317024] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:30,957 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:30,957 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-13 17:31:30,958 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [564466629] [2021-11-13 17:31:30,958 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:30,958 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-13 17:31:30,959 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:30,959 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-13 17:31:30,959 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-13 17:31:30,960 INFO L87 Difference]: Start difference. First operand 1715 states and 2280 transitions. Second operand has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-11-13 17:31:31,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:31,880 INFO L93 Difference]: Finished difference Result 2820 states and 3730 transitions. [2021-11-13 17:31:31,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-11-13 17:31:31,881 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 88 [2021-11-13 17:31:31,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:31,889 INFO L225 Difference]: With dead ends: 2820 [2021-11-13 17:31:31,889 INFO L226 Difference]: Without dead ends: 1113 [2021-11-13 17:31:31,896 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2021-11-13 17:31:31,897 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 434 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 310 mSolverCounterSat, 197 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 570.38ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 443 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 507 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 7.47ms SdHoareTripleChecker+Time, 197 IncrementalHoareTripleChecker+Valid, 310 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 679.83ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:31,897 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [443 Valid, 294 Invalid, 507 Unknown, 0 Unchecked, 7.47ms Time], IncrementalHoareTripleChecker [197 Valid, 310 Invalid, 0 Unknown, 0 Unchecked, 679.83ms Time] [2021-11-13 17:31:31,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1113 states. [2021-11-13 17:31:31,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1113 to 1062. [2021-11-13 17:31:31,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1062 states, 785 states have (on average 1.2101910828025477) internal successors, (950), 846 states have internal predecessors, (950), 143 states have call successors, (143), 110 states have call predecessors, (143), 133 states have return successors, (278), 142 states have call predecessors, (278), 143 states have call successors, (278) [2021-11-13 17:31:31,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1062 states to 1062 states and 1371 transitions. [2021-11-13 17:31:31,984 INFO L78 Accepts]: Start accepts. Automaton has 1062 states and 1371 transitions. Word has length 88 [2021-11-13 17:31:31,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:31,985 INFO L470 AbstractCegarLoop]: Abstraction has 1062 states and 1371 transitions. [2021-11-13 17:31:31,985 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-11-13 17:31:31,986 INFO L276 IsEmpty]: Start isEmpty. Operand 1062 states and 1371 transitions. [2021-11-13 17:31:31,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2021-11-13 17:31:31,990 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:31,990 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:31,990 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-11-13 17:31:31,991 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:31,991 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:31,991 INFO L85 PathProgramCache]: Analyzing trace with hash -832622466, now seen corresponding path program 1 times [2021-11-13 17:31:31,992 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:31,992 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [114729440] [2021-11-13 17:31:31,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:31,992 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:32,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:32,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-13 17:31:32,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-13 17:31:32,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-13 17:31:32,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:32,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-13 17:31:32,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-11-13 17:31:32,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:32,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-11-13 17:31:32,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,133 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-11-13 17:31:32,133 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:32,133 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [114729440] [2021-11-13 17:31:32,133 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [114729440] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-13 17:31:32,133 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [835843142] [2021-11-13 17:31:32,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:32,134 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 17:31:32,134 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 17:31:32,138 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-13 17:31:32,186 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-13 17:31:32,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,336 INFO L263 TraceCheckSpWp]: Trace formula consists of 548 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-13 17:31:32,354 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-13 17:31:32,704 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:32,705 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-13 17:31:32,705 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [835843142] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:32,705 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-13 17:31:32,705 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2021-11-13 17:31:32,706 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [921259927] [2021-11-13 17:31:32,706 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:32,706 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-13 17:31:32,707 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:32,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-13 17:31:32,708 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-11-13 17:31:32,708 INFO L87 Difference]: Start difference. First operand 1062 states and 1371 transitions. Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-11-13 17:31:32,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:32,888 INFO L93 Difference]: Finished difference Result 1830 states and 2407 transitions. [2021-11-13 17:31:32,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-13 17:31:32,889 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 102 [2021-11-13 17:31:32,889 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:32,895 INFO L225 Difference]: With dead ends: 1830 [2021-11-13 17:31:32,896 INFO L226 Difference]: Without dead ends: 950 [2021-11-13 17:31:32,899 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-11-13 17:31:32,900 INFO L933 BasicCegarLoop]: 159 mSDtfsCounter, 53 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 75.94ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.33ms SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 93.46ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:32,901 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [53 Valid, 233 Invalid, 18 Unknown, 0 Unchecked, 1.33ms Time], IncrementalHoareTripleChecker [4 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 93.46ms Time] [2021-11-13 17:31:32,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 950 states. [2021-11-13 17:31:32,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 950 to 950. [2021-11-13 17:31:32,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 950 states, 702 states have (on average 1.1851851851851851) internal successors, (832), 758 states have internal predecessors, (832), 128 states have call successors, (128), 103 states have call predecessors, (128), 119 states have return successors, (189), 125 states have call predecessors, (189), 128 states have call successors, (189) [2021-11-13 17:31:32,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 950 states to 950 states and 1149 transitions. [2021-11-13 17:31:32,973 INFO L78 Accepts]: Start accepts. Automaton has 950 states and 1149 transitions. Word has length 102 [2021-11-13 17:31:32,973 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:32,973 INFO L470 AbstractCegarLoop]: Abstraction has 950 states and 1149 transitions. [2021-11-13 17:31:32,974 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-11-13 17:31:32,974 INFO L276 IsEmpty]: Start isEmpty. Operand 950 states and 1149 transitions. [2021-11-13 17:31:32,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2021-11-13 17:31:32,977 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:32,977 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:33,019 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-13 17:31:33,202 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-11-13 17:31:33,203 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:33,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:33,203 INFO L85 PathProgramCache]: Analyzing trace with hash 1470383360, now seen corresponding path program 1 times [2021-11-13 17:31:33,203 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:33,203 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [353552396] [2021-11-13 17:31:33,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:33,204 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:33,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:33,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-13 17:31:33,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-13 17:31:33,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-13 17:31:33,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:33,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-13 17:31:33,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-11-13 17:31:33,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-11-13 17:31:33,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-13 17:31:33,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:33,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-13 17:31:33,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,368 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2021-11-13 17:31:33,369 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:33,369 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [353552396] [2021-11-13 17:31:33,369 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [353552396] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-13 17:31:33,369 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1118269426] [2021-11-13 17:31:33,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:33,369 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 17:31:33,370 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 17:31:33,374 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-13 17:31:33,405 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-13 17:31:33,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:33,535 INFO L263 TraceCheckSpWp]: Trace formula consists of 571 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-13 17:31:33,540 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-13 17:31:33,845 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-11-13 17:31:33,845 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-13 17:31:33,845 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1118269426] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:33,845 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-13 17:31:33,846 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-11-13 17:31:33,846 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [992381716] [2021-11-13 17:31:33,846 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:33,846 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-13 17:31:33,847 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:33,847 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-13 17:31:33,847 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2021-11-13 17:31:33,848 INFO L87 Difference]: Start difference. First operand 950 states and 1149 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-11-13 17:31:34,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:34,150 INFO L93 Difference]: Finished difference Result 1753 states and 2113 transitions. [2021-11-13 17:31:34,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-13 17:31:34,150 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 112 [2021-11-13 17:31:34,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:34,153 INFO L225 Difference]: With dead ends: 1753 [2021-11-13 17:31:34,154 INFO L226 Difference]: Without dead ends: 0 [2021-11-13 17:31:34,158 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2021-11-13 17:31:34,159 INFO L933 BasicCegarLoop]: 199 mSDtfsCounter, 53 mSDsluCounter, 845 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 149.14ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 1044 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 5.72ms SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 191.72ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:34,159 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [54 Valid, 1044 Invalid, 71 Unknown, 0 Unchecked, 5.72ms Time], IncrementalHoareTripleChecker [7 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 191.72ms Time] [2021-11-13 17:31:34,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-13 17:31:34,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-13 17:31:34,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-13 17:31:34,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-13 17:31:34,161 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 112 [2021-11-13 17:31:34,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:34,161 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-13 17:31:34,162 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-11-13 17:31:34,162 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-13 17:31:34,162 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-13 17:31:34,165 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-13 17:31:34,205 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-13 17:31:34,390 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 17:31:34,393 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-13 17:31:41,186 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 702 709) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 2 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse5 .cse4 .cse6) (or .cse0 .cse2 .cse5 .cse3 .cse6))) [2021-11-13 17:31:41,186 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 702 709) no Hoare annotation was computed. [2021-11-13 17:31:41,186 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 702 709) no Hoare annotation was computed. [2021-11-13 17:31:41,186 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 609 615) no Hoare annotation was computed. [2021-11-13 17:31:41,187 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 609 615) the Hoare annotation is: true [2021-11-13 17:31:41,187 INFO L858 garLoopResultBuilder]: For program point L463-1(lines 459 470) no Hoare annotation was computed. [2021-11-13 17:31:41,187 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 459 470) the Hoare annotation is: (let ((.cse7 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse6 .cse4) (or .cse5 .cse2 .cse6 .cse4 .cse7) (or .cse0 .cse5 .cse2 .cse4 .cse7) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse6))) [2021-11-13 17:31:41,187 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 459 470) no Hoare annotation was computed. [2021-11-13 17:31:41,187 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 937 966) no Hoare annotation was computed. [2021-11-13 17:31:41,187 INFO L858 garLoopResultBuilder]: For program point L958(line 958) no Hoare annotation was computed. [2021-11-13 17:31:41,188 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 937 966) the Hoare annotation is: true [2021-11-13 17:31:41,188 INFO L858 garLoopResultBuilder]: For program point L951(lines 951 955) no Hoare annotation was computed. [2021-11-13 17:31:41,188 INFO L861 garLoopResultBuilder]: At program point L951-1(lines 951 955) the Hoare annotation is: true [2021-11-13 17:31:41,188 INFO L858 garLoopResultBuilder]: For program point L948(line 948) no Hoare annotation was computed. [2021-11-13 17:31:41,188 INFO L861 garLoopResultBuilder]: At program point L947-2(lines 947 961) the Hoare annotation is: true [2021-11-13 17:31:41,188 INFO L861 garLoopResultBuilder]: At program point L943(line 943) the Hoare annotation is: true [2021-11-13 17:31:41,188 INFO L858 garLoopResultBuilder]: For program point L943-1(line 943) no Hoare annotation was computed. [2021-11-13 17:31:41,188 INFO L861 garLoopResultBuilder]: At program point L962(lines 937 966) the Hoare annotation is: true [2021-11-13 17:31:41,188 INFO L854 garLoopResultBuilder]: At program point L688(line 688) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse1 .cse3 .cse6) (or .cse5 .cse4 .cse7) (or .cse5 .cse3 .cse7) (or .cse5 .cse0 .cse1 .cse4 .cse6))) [2021-11-13 17:31:41,189 INFO L854 garLoopResultBuilder]: At program point L688-1(lines 669 693) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse8 (and .cse12 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse7 (and .cse12 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (= 0 ~systemActive~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse8 .cse2 .cse9 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse8 .cse2 .cse9 .cse10) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse10 .cse7) (or .cse0 .cse6 .cse11) (or .cse0 .cse10 .cse11) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse2 .cse9 .cse6)))) [2021-11-13 17:31:41,189 INFO L854 garLoopResultBuilder]: At program point L717(lines 710 720) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse0 .cse3 .cse7) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse8)) (or .cse2 .cse5 .cse3 (and .cse4 .cse8) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-13 17:31:41,189 INFO L858 garLoopResultBuilder]: For program point L589-1(lines 588 607) no Hoare annotation was computed. [2021-11-13 17:31:41,189 INFO L854 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse9 (and .cse12 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (and .cse12 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 .cse6 .cse7 .cse8) (or .cse9 .cse2 .cse10 .cse11 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse9 .cse2 .cse10 .cse11) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse11 .cse7) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse2 .cse10 .cse6) (or .cse0 .cse11 .cse7 .cse8)))) [2021-11-13 17:31:41,189 INFO L858 garLoopResultBuilder]: For program point L552-1(line 552) no Hoare annotation was computed. [2021-11-13 17:31:41,190 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 585 608) no Hoare annotation was computed. [2021-11-13 17:31:41,190 INFO L858 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2021-11-13 17:31:41,190 INFO L854 garLoopResultBuilder]: At program point L726(lines 721 729) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (and .cse10 .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse8 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (and .cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse11 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse5) .cse6 .cse7) (or .cse3 .cse6 .cse7 .cse8) (or .cse4 .cse0 .cse1 .cse6 .cse9) (or .cse3 .cse2 .cse8) (or .cse3 .cse4 .cse0 .cse2) (or .cse0 .cse1 .cse6 .cse9 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-11-13 17:31:41,190 INFO L858 garLoopResultBuilder]: For program point L677(lines 677 685) no Hoare annotation was computed. [2021-11-13 17:31:41,190 INFO L854 garLoopResultBuilder]: At program point L421(lines 416 423) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 .cse3 .cse6))) [2021-11-13 17:31:41,191 INFO L858 garLoopResultBuilder]: For program point L673(lines 673 690) no Hoare annotation was computed. [2021-11-13 17:31:41,191 INFO L858 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2021-11-13 17:31:41,191 INFO L854 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse0 .cse3 .cse7) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3))) [2021-11-13 17:31:41,191 INFO L858 garLoopResultBuilder]: For program point L715-1(line 715) no Hoare annotation was computed. [2021-11-13 17:31:41,191 INFO L858 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2021-11-13 17:31:41,191 INFO L854 garLoopResultBuilder]: At program point L554-1(lines 546 574) the Hoare annotation is: (let ((.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~3#1| 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse10 (= ~methAndRunningLastTime~0 0)) (.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse17 (= 1 ~systemActive~0))) (let ((.cse3 (and .cse14 .cse10 .cse16 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse17)) (.cse6 (and .cse14 .cse9 .cse10 .cse12)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse17)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse16)) (.cse13 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse5 .cse4 .cse0 .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse12)) (or .cse5 .cse6 .cse7 .cse13) (or .cse0 .cse1 (and .cse14 .cse9 .cse10) .cse7 (and .cse15 .cse9 .cse10)) (or (and .cse15 .cse10 .cse12) .cse5 .cse4 .cse0 (and .cse8 .cse11 .cse12) .cse2) (or .cse5 (and .cse14 .cse10 .cse12) .cse2 .cse13)))) [2021-11-13 17:31:41,192 INFO L858 garLoopResultBuilder]: For program point L439(lines 439 443) no Hoare annotation was computed. [2021-11-13 17:31:41,192 INFO L854 garLoopResultBuilder]: At program point L439-2(lines 435 446) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse0 .cse3 .cse7) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3))) [2021-11-13 17:31:41,192 INFO L858 garLoopResultBuilder]: For program point L596-1(lines 596 602) no Hoare annotation was computed. [2021-11-13 17:31:41,192 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 585 608) the Hoare annotation is: (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (and (= ~pumpRunning~0 0) .cse9 .cse10)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse10))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse4 .cse5 .cse7 .cse2) (or .cse0 .cse7 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse1 .cse2) (or .cse5 .cse6 .cse8 .cse1) (or .cse5 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-11-13 17:31:41,192 INFO L858 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2021-11-13 17:31:41,193 INFO L854 garLoopResultBuilder]: At program point L683(line 683) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 .cse3 .cse6))) [2021-11-13 17:31:41,193 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 585 608) no Hoare annotation was computed. [2021-11-13 17:31:41,193 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2021-11-13 17:31:41,193 INFO L854 garLoopResultBuilder]: At program point L679(line 679) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse7 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 (and .cse5 (= ~methAndRunningLastTime~0 0) .cse6 .cse7) .cse3) (or .cse5 .cse2 .cse4 .cse8) (or .cse0 .cse8 .cse9) (or .cse0 .cse1 .cse2 .cse8) (or .cse2 .cse4 .cse3 (and .cse5 .cse6 .cse7) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse3 .cse9))) [2021-11-13 17:31:41,193 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 471 479) the Hoare annotation is: true [2021-11-13 17:31:41,194 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 471 479) no Hoare annotation was computed. [2021-11-13 17:31:41,194 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 471 479) no Hoare annotation was computed. [2021-11-13 17:31:41,194 INFO L854 garLoopResultBuilder]: At program point L543(lines 538 545) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-13 17:31:41,194 INFO L854 garLoopResultBuilder]: At program point L861(line 861) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse3 .cse7) (and .cse6 .cse4 .cse1 .cse3 .cse7))) [2021-11-13 17:31:41,194 INFO L854 garLoopResultBuilder]: At program point L923(lines 919 925) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-13 17:31:41,195 INFO L854 garLoopResultBuilder]: At program point L824(lines 819 826) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse0 .cse6 .cse2 .cse3))) [2021-11-13 17:31:41,195 INFO L854 garLoopResultBuilder]: At program point L886(lines 839 888) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse3 .cse7) (and .cse6 .cse4 .cse1 .cse3 .cse7))) [2021-11-13 17:31:41,195 INFO L858 garLoopResultBuilder]: For program point L849(lines 849 855) no Hoare annotation was computed. [2021-11-13 17:31:41,195 INFO L858 garLoopResultBuilder]: For program point L849-1(lines 849 855) no Hoare annotation was computed. [2021-11-13 17:31:41,195 INFO L854 garLoopResultBuilder]: At program point L816(lines 804 818) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2021-11-13 17:31:41,195 INFO L861 garLoopResultBuilder]: At program point L1006(lines 998 1008) the Hoare annotation is: true [2021-11-13 17:31:41,196 INFO L858 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2021-11-13 17:31:41,196 INFO L858 garLoopResultBuilder]: For program point L808(lines 808 814) no Hoare annotation was computed. [2021-11-13 17:31:41,196 INFO L858 garLoopResultBuilder]: For program point L808-1(lines 808 814) no Hoare annotation was computed. [2021-11-13 17:31:41,196 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-13 17:31:41,196 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-13 17:31:41,196 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-13 17:31:41,196 INFO L858 garLoopResultBuilder]: For program point L1019(lines 1019 1026) no Hoare annotation was computed. [2021-11-13 17:31:41,197 INFO L858 garLoopResultBuilder]: For program point L1019-2(lines 1019 1026) no Hoare annotation was computed. [2021-11-13 17:31:41,197 INFO L854 garLoopResultBuilder]: At program point L916(lines 912 918) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-13 17:31:41,197 INFO L861 garLoopResultBuilder]: At program point L1028(lines 1009 1031) the Hoare annotation is: true [2021-11-13 17:31:41,197 INFO L854 garLoopResultBuilder]: At program point L995(lines 991 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-13 17:31:41,197 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-13 17:31:41,197 INFO L861 garLoopResultBuilder]: At program point L892(lines 829 896) the Hoare annotation is: true [2021-11-13 17:31:41,197 INFO L858 garLoopResultBuilder]: For program point L859(lines 859 865) no Hoare annotation was computed. [2021-11-13 17:31:41,198 INFO L858 garLoopResultBuilder]: For program point L859-1(lines 859 865) no Hoare annotation was computed. [2021-11-13 17:31:41,198 INFO L854 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse3 .cse7) (and .cse6 .cse4 .cse1 .cse3 .cse7))) [2021-11-13 17:31:41,198 INFO L854 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse0 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse3 .cse6) (and .cse0 .cse1 .cse5 .cse3 .cse6) (and .cse0 .cse4 .cse2 .cse3))) [2021-11-13 17:31:41,198 INFO L854 garLoopResultBuilder]: At program point L889(lines 838 890) the Hoare annotation is: false [2021-11-13 17:31:41,198 INFO L858 garLoopResultBuilder]: For program point L877(lines 877 883) no Hoare annotation was computed. [2021-11-13 17:31:41,199 INFO L854 garLoopResultBuilder]: At program point L877-2(lines 869 884) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse1 .cse3 .cse6) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse7 .cse2 .cse3) (and .cse5 .cse7 .cse3 .cse6) (and .cse0 .cse7 .cse2 .cse3))) [2021-11-13 17:31:41,199 INFO L858 garLoopResultBuilder]: For program point L840(lines 839 888) no Hoare annotation was computed. [2021-11-13 17:31:41,199 INFO L858 garLoopResultBuilder]: For program point L869(lines 869 884) no Hoare annotation was computed. [2021-11-13 17:31:41,199 INFO L854 garLoopResultBuilder]: At program point L931(lines 926 934) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-13 17:31:41,199 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 617 641) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2021-11-13 17:31:41,200 INFO L854 garLoopResultBuilder]: At program point L636(line 636) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-11-13 17:31:41,200 INFO L858 garLoopResultBuilder]: For program point L636-1(lines 617 641) no Hoare annotation was computed. [2021-11-13 17:31:41,200 INFO L854 garLoopResultBuilder]: At program point L781(lines 766 784) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse4) (or .cse0 .cse1 .cse4 .cse2 .cse3)))) [2021-11-13 17:31:41,200 INFO L854 garLoopResultBuilder]: At program point L521(lines 512 525) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1 .cse4) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2021-11-13 17:31:41,200 INFO L858 garLoopResultBuilder]: For program point L775(lines 775 779) no Hoare annotation was computed. [2021-11-13 17:31:41,200 INFO L858 garLoopResultBuilder]: For program point L775-2(lines 775 779) no Hoare annotation was computed. [2021-11-13 17:31:41,201 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 617 641) no Hoare annotation was computed. [2021-11-13 17:31:41,201 INFO L854 garLoopResultBuilder]: At program point L699(lines 694 701) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2021-11-13 17:31:41,201 INFO L854 garLoopResultBuilder]: At program point L631(line 631) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))))) [2021-11-13 17:31:41,201 INFO L858 garLoopResultBuilder]: For program point L625(lines 625 633) no Hoare annotation was computed. [2021-11-13 17:31:41,201 INFO L858 garLoopResultBuilder]: For program point L621(lines 621 638) no Hoare annotation was computed. [2021-11-13 17:31:41,201 INFO L858 garLoopResultBuilder]: For program point L516(lines 516 522) no Hoare annotation was computed. [2021-11-13 17:31:41,202 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 447 458) no Hoare annotation was computed. [2021-11-13 17:31:41,202 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 447 458) the Hoare annotation is: (let ((.cse7 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse5 .cse6 .cse2 .cse3) (or .cse5 .cse1 .cse7 .cse2 .cse3) (or .cse0 .cse5 .cse1 .cse2 .cse3) (or .cse0 .cse6 .cse2 .cse3 .cse4))) [2021-11-13 17:31:41,202 INFO L858 garLoopResultBuilder]: For program point L451-1(lines 447 458) no Hoare annotation was computed. [2021-11-13 17:31:41,202 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 643 667) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2021-11-13 17:31:41,202 INFO L854 garLoopResultBuilder]: At program point L531(lines 526 534) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-11-13 17:31:41,203 INFO L854 garLoopResultBuilder]: At program point L657(line 657) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-11-13 17:31:41,203 INFO L854 garLoopResultBuilder]: At program point L653(line 653) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-11-13 17:31:41,203 INFO L858 garLoopResultBuilder]: For program point L651(lines 651 659) no Hoare annotation was computed. [2021-11-13 17:31:41,203 INFO L858 garLoopResultBuilder]: For program point L647(lines 647 664) no Hoare annotation was computed. [2021-11-13 17:31:41,203 INFO L854 garLoopResultBuilder]: At program point L800(lines 785 803) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-11-13 17:31:41,203 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 643 667) no Hoare annotation was computed. [2021-11-13 17:31:41,204 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 798) no Hoare annotation was computed. [2021-11-13 17:31:41,204 INFO L858 garLoopResultBuilder]: For program point L794-2(lines 794 798) no Hoare annotation was computed. [2021-11-13 17:31:41,204 INFO L854 garLoopResultBuilder]: At program point L662(line 662) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2021-11-13 17:31:41,204 INFO L858 garLoopResultBuilder]: For program point L662-1(lines 643 667) no Hoare annotation was computed. [2021-11-13 17:31:41,208 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:41,209 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-13 17:31:41,249 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.11 05:31:41 BoogieIcfgContainer [2021-11-13 17:31:41,249 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-13 17:31:41,250 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-13 17:31:41,250 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-13 17:31:41,250 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-13 17:31:41,251 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 05:31:25" (3/4) ... [2021-11-13 17:31:41,254 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-13 17:31:41,260 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-13 17:31:41,260 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-13 17:31:41,260 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-13 17:31:41,261 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-13 17:31:41,261 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-13 17:31:41,261 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-11-13 17:31:41,261 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-13 17:31:41,261 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-13 17:31:41,262 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-11-13 17:31:41,272 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-11-13 17:31:41,273 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-13 17:31:41,273 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-13 17:31:41,274 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-13 17:31:41,274 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-13 17:31:41,275 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-13 17:31:41,276 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-13 17:31:41,301 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) [2021-11-13 17:31:41,302 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) [2021-11-13 17:31:41,303 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && tmp == 0) && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && tmp == 0) && methAndRunningLastTime == 0))) && (((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) [2021-11-13 17:31:41,303 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel))) [2021-11-13 17:31:41,304 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || !(2 <= \old(waterLevel))) [2021-11-13 17:31:41,304 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2021-11-13 17:31:41,305 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2021-11-13 17:31:41,305 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) [2021-11-13 17:31:41,305 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2021-11-13 17:31:41,306 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2021-11-13 17:31:41,306 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2021-11-13 17:31:41,335 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/witness.graphml [2021-11-13 17:31:41,336 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-13 17:31:41,336 INFO L158 Benchmark]: Toolchain (without parser) took 17997.79ms. Allocated memory was 102.8MB in the beginning and 224.4MB in the end (delta: 121.6MB). Free memory was 60.5MB in the beginning and 173.9MB in the end (delta: -113.4MB). Peak memory consumption was 7.3MB. Max. memory is 16.1GB. [2021-11-13 17:31:41,337 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 102.8MB. Free memory is still 77.7MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-13 17:31:41,337 INFO L158 Benchmark]: CACSL2BoogieTranslator took 599.96ms. Allocated memory is still 102.8MB. Free memory was 60.4MB in the beginning and 67.3MB in the end (delta: -6.9MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-13 17:31:41,337 INFO L158 Benchmark]: Boogie Procedure Inliner took 80.96ms. Allocated memory is still 102.8MB. Free memory was 67.3MB in the beginning and 64.7MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-11-13 17:31:41,338 INFO L158 Benchmark]: Boogie Preprocessor took 55.80ms. Allocated memory is still 102.8MB. Free memory was 64.7MB in the beginning and 62.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-13 17:31:41,338 INFO L158 Benchmark]: RCFGBuilder took 1034.10ms. Allocated memory was 102.8MB in the beginning and 153.1MB in the end (delta: 50.3MB). Free memory was 62.6MB in the beginning and 111.0MB in the end (delta: -48.5MB). Peak memory consumption was 28.6MB. Max. memory is 16.1GB. [2021-11-13 17:31:41,339 INFO L158 Benchmark]: TraceAbstraction took 16131.36ms. Allocated memory was 153.1MB in the beginning and 224.4MB in the end (delta: 71.3MB). Free memory was 111.0MB in the beginning and 181.3MB in the end (delta: -70.2MB). Peak memory consumption was 119.8MB. Max. memory is 16.1GB. [2021-11-13 17:31:41,339 INFO L158 Benchmark]: Witness Printer took 86.24ms. Allocated memory is still 224.4MB. Free memory was 181.3MB in the beginning and 173.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-13 17:31:41,341 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 102.8MB. Free memory is still 77.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 599.96ms. Allocated memory is still 102.8MB. Free memory was 60.4MB in the beginning and 67.3MB in the end (delta: -6.9MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 80.96ms. Allocated memory is still 102.8MB. Free memory was 67.3MB in the beginning and 64.7MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 55.80ms. Allocated memory is still 102.8MB. Free memory was 64.7MB in the beginning and 62.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 1034.10ms. Allocated memory was 102.8MB in the beginning and 153.1MB in the end (delta: 50.3MB). Free memory was 62.6MB in the beginning and 111.0MB in the end (delta: -48.5MB). Peak memory consumption was 28.6MB. Max. memory is 16.1GB. * TraceAbstraction took 16131.36ms. Allocated memory was 153.1MB in the beginning and 224.4MB in the end (delta: 71.3MB). Free memory was 111.0MB in the beginning and 181.3MB in the end (delta: -70.2MB). Peak memory consumption was 119.8MB. Max. memory is 16.1GB. * Witness Printer took 86.24ms. Allocated memory is still 224.4MB. Free memory was 181.3MB in the beginning and 173.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 107 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 16.0s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2050 SdHoareTripleChecker+Valid, 3455.32ms IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2017 mSDsluCounter, 4052 SdHoareTripleChecker+Invalid, 2810.25ms Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2474 mSDsCounter, 794 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1822 IncrementalHoareTripleChecker+Invalid, 2616 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 794 mSolverCounterUnsat, 1578 mSDtfsCounter, 1822 mSolverCounterSat, 72.45ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 434 GetRequests, 336 SyntacticMatches, 1 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1715occurred in iteration=9, InterpolantAutomatonStates: 89, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 12 MinimizatonAttempts, 615 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 3199 PreInvPairs, 3447 NumberOfFragments, 3439 HoareAnnotationTreeSize, 3199 FomulaSimplifications, 972 FormulaSimplificationTreeSizeReduction, 0.8s HoareSimplificationTime, 50 FomulaSimplificationsInter, 21706 FormulaSimplificationTreeSizeReductionInter, 5.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 890 NumberOfCodeBlocks, 890 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 876 ConstructedInterpolants, 0 QuantifiedInterpolants, 1571 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1119 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 169/180 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 694]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 804]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 721]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 838]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 512]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 710]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && tmp == 0) && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && tmp == 0) && methAndRunningLastTime == 0))) && (((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 819]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-11-13 17:31:41,405 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fb65fcd2-3564-41e6-bb86-612c97a939c9/bin/uautomizer-YU5uOKAj3y/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE