./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c4da108453cefa034e9e2f20ae1a945f7f6bf5ea54205b9ec625406680c7ecea --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 05:37:44,903 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 05:37:44,905 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 05:37:44,957 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 05:37:44,957 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 05:37:44,961 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 05:37:44,963 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 05:37:44,966 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 05:37:44,968 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 05:37:44,974 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 05:37:44,975 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 05:37:44,977 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 05:37:44,977 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 05:37:44,980 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 05:37:44,983 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 05:37:44,992 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 05:37:44,993 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 05:37:44,995 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 05:37:44,998 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 05:37:45,004 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 05:37:45,006 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 05:37:45,010 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 05:37:45,012 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 05:37:45,013 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 05:37:45,020 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 05:37:45,025 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 05:37:45,026 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 05:37:45,027 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 05:37:45,029 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 05:37:45,030 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 05:37:45,030 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 05:37:45,030 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 05:37:45,031 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 05:37:45,032 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 05:37:45,033 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 05:37:45,033 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 05:37:45,034 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 05:37:45,035 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 05:37:45,035 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 05:37:45,036 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 05:37:45,037 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 05:37:45,038 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 05:37:45,063 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 05:37:45,064 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 05:37:45,064 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 05:37:45,064 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 05:37:45,065 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 05:37:45,065 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 05:37:45,066 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 05:37:45,066 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 05:37:45,066 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 05:37:45,066 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 05:37:45,066 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 05:37:45,067 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 05:37:45,067 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 05:37:45,067 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 05:37:45,067 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 05:37:45,067 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 05:37:45,068 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 05:37:45,068 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 05:37:45,068 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 05:37:45,068 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 05:37:45,068 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 05:37:45,068 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 05:37:45,069 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 05:37:45,069 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 05:37:45,069 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 05:37:45,069 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 05:37:45,069 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 05:37:45,070 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 05:37:45,070 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 05:37:45,070 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 05:37:45,070 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 05:37:45,070 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 05:37:45,070 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 05:37:45,071 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 05:37:45,071 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c4da108453cefa034e9e2f20ae1a945f7f6bf5ea54205b9ec625406680c7ecea [2021-11-20 05:37:45,393 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 05:37:45,432 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 05:37:45,434 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 05:37:45,436 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 05:37:45,436 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 05:37:45,438 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2021-11-20 05:37:45,512 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/data/79a7ac3c7/62153eb3c0bf4dce84708f7fcbde18b8/FLAGfa46de4af [2021-11-20 05:37:46,031 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 05:37:46,032 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2021-11-20 05:37:46,049 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/data/79a7ac3c7/62153eb3c0bf4dce84708f7fcbde18b8/FLAGfa46de4af [2021-11-20 05:37:46,335 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/data/79a7ac3c7/62153eb3c0bf4dce84708f7fcbde18b8 [2021-11-20 05:37:46,337 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 05:37:46,338 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 05:37:46,347 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 05:37:46,347 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 05:37:46,351 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 05:37:46,352 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,353 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4c2bb995 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46, skipping insertion in model container [2021-11-20 05:37:46,353 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,359 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 05:37:46,404 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 05:37:46,587 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c[2044,2057] [2021-11-20 05:37:46,692 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 05:37:46,701 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 05:37:46,729 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c[2044,2057] [2021-11-20 05:37:46,836 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 05:37:46,855 INFO L208 MainTranslator]: Completed translation [2021-11-20 05:37:46,856 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46 WrapperNode [2021-11-20 05:37:46,856 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 05:37:46,857 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 05:37:46,857 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 05:37:46,857 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 05:37:46,865 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,882 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,910 INFO L137 Inliner]: procedures = 55, calls = 157, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 241 [2021-11-20 05:37:46,911 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 05:37:46,911 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 05:37:46,911 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 05:37:46,912 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 05:37:46,920 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,921 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,924 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,924 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,931 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,936 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,938 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,941 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 05:37:46,942 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 05:37:46,942 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 05:37:46,942 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 05:37:46,943 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (1/1) ... [2021-11-20 05:37:46,951 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 05:37:46,965 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:37:46,984 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 05:37:46,986 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 05:37:47,025 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 05:37:47,025 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 05:37:47,025 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 05:37:47,025 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 05:37:47,026 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 05:37:47,026 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 05:37:47,026 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 05:37:47,026 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-11-20 05:37:47,026 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-11-20 05:37:47,027 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 05:37:47,027 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 05:37:47,027 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-11-20 05:37:47,027 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-11-20 05:37:47,028 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-11-20 05:37:47,028 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-11-20 05:37:47,029 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-20 05:37:47,029 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-20 05:37:47,029 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 05:37:47,030 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 05:37:47,030 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 05:37:47,030 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 05:37:47,030 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 05:37:47,130 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 05:37:47,132 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 05:37:47,513 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 05:37:47,522 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 05:37:47,522 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 05:37:47,525 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:37:47 BoogieIcfgContainer [2021-11-20 05:37:47,525 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 05:37:47,527 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 05:37:47,527 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 05:37:47,531 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 05:37:47,532 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 05:37:46" (1/3) ... [2021-11-20 05:37:47,533 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5da2b5a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 05:37:47, skipping insertion in model container [2021-11-20 05:37:47,533 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:37:46" (2/3) ... [2021-11-20 05:37:47,533 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5da2b5a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 05:37:47, skipping insertion in model container [2021-11-20 05:37:47,534 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:37:47" (3/3) ... [2021-11-20 05:37:47,535 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product47.cil.c [2021-11-20 05:37:47,541 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 05:37:47,543 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 05:37:47,614 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 05:37:47,625 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 05:37:47,625 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 05:37:47,650 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2021-11-20 05:37:47,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2021-11-20 05:37:47,658 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:47,659 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:47,660 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:47,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:47,677 INFO L85 PathProgramCache]: Analyzing trace with hash -707310338, now seen corresponding path program 1 times [2021-11-20 05:37:47,684 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:47,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [18459985] [2021-11-20 05:37:47,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:47,686 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:47,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:47,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 05:37:47,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:47,908 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 05:37:47,909 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:47,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [18459985] [2021-11-20 05:37:47,910 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [18459985] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:47,910 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:37:47,911 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 05:37:47,912 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1760832165] [2021-11-20 05:37:47,913 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:47,918 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 05:37:47,918 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:47,959 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 05:37:47,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 05:37:47,962 INFO L87 Difference]: Start difference. First operand has 100 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 05:37:48,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:48,033 INFO L93 Difference]: Finished difference Result 192 states and 259 transitions. [2021-11-20 05:37:48,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 05:37:48,037 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2021-11-20 05:37:48,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:48,046 INFO L225 Difference]: With dead ends: 192 [2021-11-20 05:37:48,046 INFO L226 Difference]: Without dead ends: 91 [2021-11-20 05:37:48,050 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 05:37:48,054 INFO L933 BasicCegarLoop]: 126 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:48,055 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 05:37:48,072 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2021-11-20 05:37:48,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2021-11-20 05:37:48,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-20 05:37:48,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 117 transitions. [2021-11-20 05:37:48,105 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 117 transitions. Word has length 23 [2021-11-20 05:37:48,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:48,106 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 117 transitions. [2021-11-20 05:37:48,106 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 05:37:48,106 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2021-11-20 05:37:48,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-11-20 05:37:48,109 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:48,110 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:48,110 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 05:37:48,110 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:48,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:48,111 INFO L85 PathProgramCache]: Analyzing trace with hash 624156156, now seen corresponding path program 1 times [2021-11-20 05:37:48,112 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:48,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1109587336] [2021-11-20 05:37:48,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:48,112 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:48,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:48,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 05:37:48,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:48,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 05:37:48,202 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:48,202 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1109587336] [2021-11-20 05:37:48,203 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1109587336] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:48,203 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:37:48,203 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 05:37:48,203 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821713798] [2021-11-20 05:37:48,204 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:48,205 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 05:37:48,205 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:48,206 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 05:37:48,206 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:37:48,207 INFO L87 Difference]: Start difference. First operand 91 states and 117 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 05:37:48,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:48,236 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2021-11-20 05:37:48,240 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 05:37:48,240 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2021-11-20 05:37:48,241 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:48,243 INFO L225 Difference]: With dead ends: 144 [2021-11-20 05:37:48,246 INFO L226 Difference]: Without dead ends: 82 [2021-11-20 05:37:48,247 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:37:48,249 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 16 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:48,251 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 05:37:48,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2021-11-20 05:37:48,265 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2021-11-20 05:37:48,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-11-20 05:37:48,270 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2021-11-20 05:37:48,271 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 24 [2021-11-20 05:37:48,272 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:48,272 INFO L470 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2021-11-20 05:37:48,273 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 05:37:48,274 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2021-11-20 05:37:48,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2021-11-20 05:37:48,278 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:48,278 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:48,279 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 05:37:48,279 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:48,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:48,287 INFO L85 PathProgramCache]: Analyzing trace with hash -1800989914, now seen corresponding path program 1 times [2021-11-20 05:37:48,288 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:48,288 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1915768521] [2021-11-20 05:37:48,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:48,289 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:48,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:48,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 05:37:48,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:48,450 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 05:37:48,450 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:48,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1915768521] [2021-11-20 05:37:48,451 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1915768521] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:48,451 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:37:48,451 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 05:37:48,452 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1770463510] [2021-11-20 05:37:48,452 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:48,452 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 05:37:48,453 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:48,455 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 05:37:48,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:37:48,456 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 05:37:48,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:48,492 INFO L93 Difference]: Finished difference Result 231 states and 301 transitions. [2021-11-20 05:37:48,492 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 05:37:48,492 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2021-11-20 05:37:48,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:48,496 INFO L225 Difference]: With dead ends: 231 [2021-11-20 05:37:48,496 INFO L226 Difference]: Without dead ends: 156 [2021-11-20 05:37:48,498 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:37:48,499 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 85 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:48,500 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [85 Valid, 228 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 05:37:48,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2021-11-20 05:37:48,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 153. [2021-11-20 05:37:48,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 110 states have (on average 1.3363636363636364) internal successors, (147), 125 states have internal predecessors, (147), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2021-11-20 05:37:48,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 199 transitions. [2021-11-20 05:37:48,531 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 199 transitions. Word has length 28 [2021-11-20 05:37:48,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:48,531 INFO L470 AbstractCegarLoop]: Abstraction has 153 states and 199 transitions. [2021-11-20 05:37:48,532 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 05:37:48,532 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 199 transitions. [2021-11-20 05:37:48,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-20 05:37:48,534 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:48,534 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:48,535 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 05:37:48,535 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:48,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:48,536 INFO L85 PathProgramCache]: Analyzing trace with hash -40246052, now seen corresponding path program 1 times [2021-11-20 05:37:48,536 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:48,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1241599802] [2021-11-20 05:37:48,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:48,537 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:48,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:48,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-11-20 05:37:48,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:48,694 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 05:37:48,695 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:48,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1241599802] [2021-11-20 05:37:48,696 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1241599802] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:48,696 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:37:48,696 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:37:48,697 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1743779982] [2021-11-20 05:37:48,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:48,698 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:37:48,698 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:48,699 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:37:48,699 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:37:48,700 INFO L87 Difference]: Start difference. First operand 153 states and 199 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 05:37:48,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:48,874 INFO L93 Difference]: Finished difference Result 445 states and 588 transitions. [2021-11-20 05:37:48,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 05:37:48,875 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2021-11-20 05:37:48,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:48,880 INFO L225 Difference]: With dead ends: 445 [2021-11-20 05:37:48,880 INFO L226 Difference]: Without dead ends: 299 [2021-11-20 05:37:48,882 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-20 05:37:48,883 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 76 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:48,884 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 518 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:37:48,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2021-11-20 05:37:48,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 293. [2021-11-20 05:37:48,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 293 states, 208 states have (on average 1.3269230769230769) internal successors, (276), 237 states have internal predecessors, (276), 52 states have call successors, (52), 32 states have call predecessors, (52), 32 states have return successors, (54), 38 states have call predecessors, (54), 52 states have call successors, (54) [2021-11-20 05:37:48,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 293 states to 293 states and 382 transitions. [2021-11-20 05:37:48,964 INFO L78 Accepts]: Start accepts. Automaton has 293 states and 382 transitions. Word has length 32 [2021-11-20 05:37:48,964 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:48,964 INFO L470 AbstractCegarLoop]: Abstraction has 293 states and 382 transitions. [2021-11-20 05:37:48,964 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 05:37:48,965 INFO L276 IsEmpty]: Start isEmpty. Operand 293 states and 382 transitions. [2021-11-20 05:37:48,968 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-11-20 05:37:48,968 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:48,968 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:48,968 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 05:37:48,969 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:48,969 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:48,969 INFO L85 PathProgramCache]: Analyzing trace with hash 1430200224, now seen corresponding path program 1 times [2021-11-20 05:37:48,970 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:48,970 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1301592808] [2021-11-20 05:37:48,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:48,970 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:49,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:49,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 05:37:49,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:49,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:37:49,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:49,085 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 05:37:49,085 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:49,086 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1301592808] [2021-11-20 05:37:49,086 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1301592808] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:49,086 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:37:49,086 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:37:49,086 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1588538627] [2021-11-20 05:37:49,087 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:49,087 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:37:49,087 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:49,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:37:49,088 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:37:49,088 INFO L87 Difference]: Start difference. First operand 293 states and 382 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:37:49,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:49,438 INFO L93 Difference]: Finished difference Result 775 states and 1023 transitions. [2021-11-20 05:37:49,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 05:37:49,438 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2021-11-20 05:37:49,439 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:49,443 INFO L225 Difference]: With dead ends: 775 [2021-11-20 05:37:49,443 INFO L226 Difference]: Without dead ends: 489 [2021-11-20 05:37:49,446 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:37:49,447 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 128 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 217 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 217 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:49,448 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [135 Valid, 246 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 217 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:37:49,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 489 states. [2021-11-20 05:37:49,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 489 to 475. [2021-11-20 05:37:49,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 475 states, 342 states have (on average 1.2748538011695907) internal successors, (436), 375 states have internal predecessors, (436), 72 states have call successors, (72), 60 states have call predecessors, (72), 60 states have return successors, (92), 66 states have call predecessors, (92), 72 states have call successors, (92) [2021-11-20 05:37:49,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 475 states to 475 states and 600 transitions. [2021-11-20 05:37:49,492 INFO L78 Accepts]: Start accepts. Automaton has 475 states and 600 transitions. Word has length 36 [2021-11-20 05:37:49,492 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:49,493 INFO L470 AbstractCegarLoop]: Abstraction has 475 states and 600 transitions. [2021-11-20 05:37:49,493 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:37:49,493 INFO L276 IsEmpty]: Start isEmpty. Operand 475 states and 600 transitions. [2021-11-20 05:37:49,501 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-11-20 05:37:49,502 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:49,502 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:49,502 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 05:37:49,502 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:49,503 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:49,503 INFO L85 PathProgramCache]: Analyzing trace with hash -1476072605, now seen corresponding path program 1 times [2021-11-20 05:37:49,503 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:49,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1218634009] [2021-11-20 05:37:49,504 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:49,504 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:49,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:49,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 05:37:49,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:49,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-11-20 05:37:49,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:49,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 05:37:49,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:49,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:37:49,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:49,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-11-20 05:37:49,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:49,640 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:37:49,641 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:49,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1218634009] [2021-11-20 05:37:49,642 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1218634009] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:49,642 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:37:49,642 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:37:49,643 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [875202536] [2021-11-20 05:37:49,643 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:49,643 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:37:49,644 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:49,644 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:37:49,645 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:37:49,646 INFO L87 Difference]: Start difference. First operand 475 states and 600 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 05:37:49,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:49,930 INFO L93 Difference]: Finished difference Result 1089 states and 1412 transitions. [2021-11-20 05:37:49,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 05:37:49,930 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2021-11-20 05:37:49,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:49,935 INFO L225 Difference]: With dead ends: 1089 [2021-11-20 05:37:49,936 INFO L226 Difference]: Without dead ends: 621 [2021-11-20 05:37:49,938 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:37:49,939 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 153 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 199 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 154 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 199 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:49,940 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [154 Valid, 219 Invalid, 261 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 199 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:37:49,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 621 states. [2021-11-20 05:37:49,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 621 to 563. [2021-11-20 05:37:49,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 563 states, 410 states have (on average 1.2439024390243902) internal successors, (510), 443 states have internal predecessors, (510), 80 states have call successors, (80), 60 states have call predecessors, (80), 72 states have return successors, (112), 82 states have call predecessors, (112), 80 states have call successors, (112) [2021-11-20 05:37:49,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 563 states to 563 states and 702 transitions. [2021-11-20 05:37:49,989 INFO L78 Accepts]: Start accepts. Automaton has 563 states and 702 transitions. Word has length 58 [2021-11-20 05:37:49,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:49,990 INFO L470 AbstractCegarLoop]: Abstraction has 563 states and 702 transitions. [2021-11-20 05:37:49,990 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 05:37:49,990 INFO L276 IsEmpty]: Start isEmpty. Operand 563 states and 702 transitions. [2021-11-20 05:37:49,992 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-11-20 05:37:49,993 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:49,993 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:49,993 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 05:37:49,993 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:49,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:49,994 INFO L85 PathProgramCache]: Analyzing trace with hash -1498704859, now seen corresponding path program 1 times [2021-11-20 05:37:49,994 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:49,994 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1238646852] [2021-11-20 05:37:49,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:49,994 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:50,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 05:37:50,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-11-20 05:37:50,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 05:37:50,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:37:50,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-11-20 05:37:50,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,075 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:37:50,075 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:50,075 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1238646852] [2021-11-20 05:37:50,075 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1238646852] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:50,075 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:37:50,076 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 05:37:50,076 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2066179809] [2021-11-20 05:37:50,076 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:50,076 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 05:37:50,077 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:50,077 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 05:37:50,077 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 05:37:50,077 INFO L87 Difference]: Start difference. First operand 563 states and 702 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 05:37:50,383 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:50,384 INFO L93 Difference]: Finished difference Result 1153 states and 1478 transitions. [2021-11-20 05:37:50,384 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 05:37:50,384 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2021-11-20 05:37:50,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:50,389 INFO L225 Difference]: With dead ends: 1153 [2021-11-20 05:37:50,389 INFO L226 Difference]: Without dead ends: 597 [2021-11-20 05:37:50,391 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-11-20 05:37:50,392 INFO L933 BasicCegarLoop]: 85 mSDtfsCounter, 132 mSDsluCounter, 169 mSDsCounter, 0 mSdLazyCounter, 260 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 133 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 320 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 260 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:50,393 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [133 Valid, 254 Invalid, 320 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 260 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:37:50,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 597 states. [2021-11-20 05:37:50,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 597 to 575. [2021-11-20 05:37:50,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 575 states, 422 states have (on average 1.2369668246445498) internal successors, (522), 455 states have internal predecessors, (522), 80 states have call successors, (80), 60 states have call predecessors, (80), 72 states have return successors, (112), 82 states have call predecessors, (112), 80 states have call successors, (112) [2021-11-20 05:37:50,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 575 states to 575 states and 714 transitions. [2021-11-20 05:37:50,440 INFO L78 Accepts]: Start accepts. Automaton has 575 states and 714 transitions. Word has length 58 [2021-11-20 05:37:50,440 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:50,440 INFO L470 AbstractCegarLoop]: Abstraction has 575 states and 714 transitions. [2021-11-20 05:37:50,446 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 05:37:50,446 INFO L276 IsEmpty]: Start isEmpty. Operand 575 states and 714 transitions. [2021-11-20 05:37:50,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-11-20 05:37:50,448 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:50,448 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:50,448 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 05:37:50,448 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:50,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:50,450 INFO L85 PathProgramCache]: Analyzing trace with hash -1201312991, now seen corresponding path program 1 times [2021-11-20 05:37:50,450 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:50,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2097556202] [2021-11-20 05:37:50,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:50,451 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:50,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 05:37:50,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-11-20 05:37:50,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 05:37:50,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:37:50,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-11-20 05:37:50,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:50,545 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:37:50,545 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:50,545 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2097556202] [2021-11-20 05:37:50,545 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2097556202] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:50,546 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:37:50,546 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:37:50,546 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1347217887] [2021-11-20 05:37:50,546 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:50,547 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:37:50,547 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:50,548 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:37:50,548 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:37:50,548 INFO L87 Difference]: Start difference. First operand 575 states and 714 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-20 05:37:50,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:50,959 INFO L93 Difference]: Finished difference Result 1629 states and 2110 transitions. [2021-11-20 05:37:50,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-20 05:37:50,960 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 58 [2021-11-20 05:37:50,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:50,968 INFO L225 Difference]: With dead ends: 1629 [2021-11-20 05:37:50,968 INFO L226 Difference]: Without dead ends: 1061 [2021-11-20 05:37:50,971 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-11-20 05:37:50,975 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 334 mSDsluCounter, 139 mSDsCounter, 0 mSdLazyCounter, 254 mSolverCounterSat, 142 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 337 SdHoareTripleChecker+Valid, 273 SdHoareTripleChecker+Invalid, 396 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 254 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:50,976 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [337 Valid, 273 Invalid, 396 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 254 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 05:37:50,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1061 states. [2021-11-20 05:37:51,066 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1061 to 1049. [2021-11-20 05:37:51,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1049 states, 776 states have (on average 1.2164948453608246) internal successors, (944), 827 states have internal predecessors, (944), 142 states have call successors, (142), 126 states have call predecessors, (142), 130 states have return successors, (228), 140 states have call predecessors, (228), 142 states have call successors, (228) [2021-11-20 05:37:51,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1049 states to 1049 states and 1314 transitions. [2021-11-20 05:37:51,081 INFO L78 Accepts]: Start accepts. Automaton has 1049 states and 1314 transitions. Word has length 58 [2021-11-20 05:37:51,081 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:51,081 INFO L470 AbstractCegarLoop]: Abstraction has 1049 states and 1314 transitions. [2021-11-20 05:37:51,085 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-20 05:37:51,085 INFO L276 IsEmpty]: Start isEmpty. Operand 1049 states and 1314 transitions. [2021-11-20 05:37:51,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-11-20 05:37:51,089 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:51,089 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:51,089 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 05:37:51,090 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:51,090 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:51,091 INFO L85 PathProgramCache]: Analyzing trace with hash -238505913, now seen corresponding path program 1 times [2021-11-20 05:37:51,091 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:51,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1632922434] [2021-11-20 05:37:51,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:51,091 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:51,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:51,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 05:37:51,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:51,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-11-20 05:37:51,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:51,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:37:51,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:51,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 05:37:51,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:51,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:37:51,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:51,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2021-11-20 05:37:51,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:51,308 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-20 05:37:51,308 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:51,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1632922434] [2021-11-20 05:37:51,308 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1632922434] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 05:37:51,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [395000907] [2021-11-20 05:37:51,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:51,309 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:37:51,309 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:37:51,311 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 05:37:51,335 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 05:37:51,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:51,409 INFO L263 TraceCheckSpWp]: Trace formula consists of 382 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-20 05:37:51,416 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 05:37:51,830 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 05:37:51,830 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 05:37:51,830 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [395000907] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:51,830 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 05:37:51,831 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2021-11-20 05:37:51,831 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1026298065] [2021-11-20 05:37:51,831 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:51,832 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 05:37:51,832 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:51,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 05:37:51,833 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2021-11-20 05:37:51,833 INFO L87 Difference]: Start difference. First operand 1049 states and 1314 transitions. Second operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2021-11-20 05:37:52,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:52,039 INFO L93 Difference]: Finished difference Result 2049 states and 2579 transitions. [2021-11-20 05:37:52,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 05:37:52,040 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 62 [2021-11-20 05:37:52,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:52,049 INFO L225 Difference]: With dead ends: 2049 [2021-11-20 05:37:52,049 INFO L226 Difference]: Without dead ends: 1007 [2021-11-20 05:37:52,055 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2021-11-20 05:37:52,058 INFO L933 BasicCegarLoop]: 191 mSDtfsCounter, 69 mSDsluCounter, 693 mSDsCounter, 0 mSdLazyCounter, 185 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 884 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 185 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:52,059 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [73 Valid, 884 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 185 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:37:52,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1007 states. [2021-11-20 05:37:52,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1007 to 1003. [2021-11-20 05:37:52,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1003 states, 740 states have (on average 1.2027027027027026) internal successors, (890), 789 states have internal predecessors, (890), 138 states have call successors, (138), 122 states have call predecessors, (138), 124 states have return successors, (200), 134 states have call predecessors, (200), 138 states have call successors, (200) [2021-11-20 05:37:52,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1003 states to 1003 states and 1228 transitions. [2021-11-20 05:37:52,141 INFO L78 Accepts]: Start accepts. Automaton has 1003 states and 1228 transitions. Word has length 62 [2021-11-20 05:37:52,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:52,142 INFO L470 AbstractCegarLoop]: Abstraction has 1003 states and 1228 transitions. [2021-11-20 05:37:52,145 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2021-11-20 05:37:52,145 INFO L276 IsEmpty]: Start isEmpty. Operand 1003 states and 1228 transitions. [2021-11-20 05:37:52,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-11-20 05:37:52,149 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:52,149 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:52,189 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 05:37:52,364 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:37:52,364 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:52,364 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:52,365 INFO L85 PathProgramCache]: Analyzing trace with hash -353852961, now seen corresponding path program 1 times [2021-11-20 05:37:52,365 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:52,365 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [856874222] [2021-11-20 05:37:52,365 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:52,365 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:52,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:52,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 05:37:52,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:52,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-11-20 05:37:52,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:52,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 05:37:52,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:52,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 05:37:52,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:52,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:37:52,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:52,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-11-20 05:37:52,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:52,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-11-20 05:37:52,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:52,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-11-20 05:37:52,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:52,506 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-20 05:37:52,507 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:52,507 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [856874222] [2021-11-20 05:37:52,507 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [856874222] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:52,507 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:37:52,508 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 05:37:52,508 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [13801369] [2021-11-20 05:37:52,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:52,509 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 05:37:52,510 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:52,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 05:37:52,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 05:37:52,511 INFO L87 Difference]: Start difference. First operand 1003 states and 1228 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-20 05:37:52,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:52,932 INFO L93 Difference]: Finished difference Result 1335 states and 1642 transitions. [2021-11-20 05:37:52,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-20 05:37:52,932 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 89 [2021-11-20 05:37:52,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:52,937 INFO L225 Difference]: With dead ends: 1335 [2021-11-20 05:37:52,937 INFO L226 Difference]: Without dead ends: 592 [2021-11-20 05:37:52,940 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2021-11-20 05:37:52,941 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 407 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 262 mSolverCounterSat, 189 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 417 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 451 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 189 IncrementalHoareTripleChecker+Valid, 262 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:52,941 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [417 Valid, 275 Invalid, 451 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [189 Valid, 262 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 05:37:52,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2021-11-20 05:37:52,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 572. [2021-11-20 05:37:52,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 572 states, 420 states have (on average 1.1571428571428573) internal successors, (486), 450 states have internal predecessors, (486), 81 states have call successors, (81), 60 states have call predecessors, (81), 70 states have return successors, (128), 81 states have call predecessors, (128), 81 states have call successors, (128) [2021-11-20 05:37:52,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 572 states to 572 states and 695 transitions. [2021-11-20 05:37:52,994 INFO L78 Accepts]: Start accepts. Automaton has 572 states and 695 transitions. Word has length 89 [2021-11-20 05:37:52,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:52,994 INFO L470 AbstractCegarLoop]: Abstraction has 572 states and 695 transitions. [2021-11-20 05:37:52,994 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-11-20 05:37:52,995 INFO L276 IsEmpty]: Start isEmpty. Operand 572 states and 695 transitions. [2021-11-20 05:37:52,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2021-11-20 05:37:52,997 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:37:52,998 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:52,998 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-11-20 05:37:52,998 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:37:52,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:37:52,999 INFO L85 PathProgramCache]: Analyzing trace with hash -753408287, now seen corresponding path program 1 times [2021-11-20 05:37:52,999 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:37:52,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [588535811] [2021-11-20 05:37:52,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:52,999 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:37:53,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 05:37:53,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 05:37:53,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 05:37:53,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 05:37:53,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:37:53,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-11-20 05:37:53,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-11-20 05:37:53,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2021-11-20 05:37:53,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:37:53,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2021-11-20 05:37:53,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:37:53,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-20 05:37:53,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,188 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2021-11-20 05:37:53,188 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:37:53,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [588535811] [2021-11-20 05:37:53,188 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [588535811] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 05:37:53,189 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [576427640] [2021-11-20 05:37:53,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:37:53,189 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:37:53,189 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:37:53,190 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 05:37:53,214 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 05:37:53,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:37:53,295 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-20 05:37:53,300 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 05:37:53,580 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-20 05:37:53,580 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 05:37:53,580 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [576427640] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:37:53,581 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 05:37:53,581 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2021-11-20 05:37:53,581 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [970894449] [2021-11-20 05:37:53,581 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:37:53,582 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 05:37:53,582 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:37:53,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 05:37:53,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2021-11-20 05:37:53,583 INFO L87 Difference]: Start difference. First operand 572 states and 695 transitions. Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-20 05:37:53,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:37:53,748 INFO L93 Difference]: Finished difference Result 1000 states and 1235 transitions. [2021-11-20 05:37:53,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 05:37:53,749 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 106 [2021-11-20 05:37:53,749 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:37:53,749 INFO L225 Difference]: With dead ends: 1000 [2021-11-20 05:37:53,749 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 05:37:53,753 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2021-11-20 05:37:53,754 INFO L933 BasicCegarLoop]: 174 mSDtfsCounter, 68 mSDsluCounter, 777 mSDsCounter, 0 mSdLazyCounter, 117 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 951 SdHoareTripleChecker+Invalid, 123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 117 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:37:53,754 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [72 Valid, 951 Invalid, 123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:37:53,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 05:37:53,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 05:37:53,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 05:37:53,755 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 05:37:53,755 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 106 [2021-11-20 05:37:53,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:37:53,756 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 05:37:53,756 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-20 05:37:53,756 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 05:37:53,756 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 05:37:53,759 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 05:37:53,797 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 05:37:53,983 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:37:53,985 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 05:37:58,383 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 342 349) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse4) (or .cse0 .cse3 .cse2 .cse5))) [2021-11-20 05:37:58,383 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 342 349) no Hoare annotation was computed. [2021-11-20 05:37:58,383 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 342 349) no Hoare annotation was computed. [2021-11-20 05:37:58,383 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 258 264) no Hoare annotation was computed. [2021-11-20 05:37:58,383 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 258 264) the Hoare annotation is: true [2021-11-20 05:37:58,383 INFO L858 garLoopResultBuilder]: For program point L162-1(lines 158 169) no Hoare annotation was computed. [2021-11-20 05:37:58,384 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 158 169) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse3 .cse2 .cse5 .cse4) (or .cse3 .cse1 .cse2 .cse5))) [2021-11-20 05:37:58,384 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 158 169) no Hoare annotation was computed. [2021-11-20 05:37:58,384 INFO L858 garLoopResultBuilder]: For program point L897(line 897) no Hoare annotation was computed. [2021-11-20 05:37:58,384 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 876 905) no Hoare annotation was computed. [2021-11-20 05:37:58,384 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 876 905) the Hoare annotation is: true [2021-11-20 05:37:58,384 INFO L858 garLoopResultBuilder]: For program point L890(lines 890 894) no Hoare annotation was computed. [2021-11-20 05:37:58,384 INFO L861 garLoopResultBuilder]: At program point L890-1(lines 890 894) the Hoare annotation is: true [2021-11-20 05:37:58,385 INFO L858 garLoopResultBuilder]: For program point L887(line 887) no Hoare annotation was computed. [2021-11-20 05:37:58,385 INFO L861 garLoopResultBuilder]: At program point L886-2(lines 886 900) the Hoare annotation is: true [2021-11-20 05:37:58,385 INFO L861 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: true [2021-11-20 05:37:58,385 INFO L858 garLoopResultBuilder]: For program point L882-1(line 882) no Hoare annotation was computed. [2021-11-20 05:37:58,385 INFO L861 garLoopResultBuilder]: At program point L901(lines 876 905) the Hoare annotation is: true [2021-11-20 05:37:58,385 INFO L854 garLoopResultBuilder]: At program point L366(lines 361 369) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 (and .cse4 .cse5 .cse3) .cse6) (or .cse1 (and .cse4 .cse5) .cse2) (or .cse0 .cse7 .cse6) (or .cse1 .cse7))) [2021-11-20 05:37:58,385 INFO L858 garLoopResultBuilder]: For program point L238-1(lines 237 256) no Hoare annotation was computed. [2021-11-20 05:37:58,386 INFO L858 garLoopResultBuilder]: For program point L300(lines 300 308) no Hoare annotation was computed. [2021-11-20 05:37:58,386 INFO L858 garLoopResultBuilder]: For program point L296(lines 296 313) no Hoare annotation was computed. [2021-11-20 05:37:58,386 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 234 257) no Hoare annotation was computed. [2021-11-20 05:37:58,386 INFO L858 garLoopResultBuilder]: For program point L65(lines 65 71) no Hoare annotation was computed. [2021-11-20 05:37:58,386 INFO L858 garLoopResultBuilder]: For program point L61(lines 61 74) no Hoare annotation was computed. [2021-11-20 05:37:58,386 INFO L854 garLoopResultBuilder]: At program point L61-1(lines 53 77) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 0 ~systemActive~0)))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or .cse0 .cse5 .cse3 .cse2) (or .cse1 .cse5 .cse3) (or .cse5 (and .cse6 (<= 2 ~waterLevel~0)) (and .cse1 .cse6) .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (or .cse0 .cse5 .cse7 .cse2) (or (and .cse1 .cse6 .cse2) .cse0 .cse7 .cse4))) [2021-11-20 05:37:58,386 INFO L858 garLoopResultBuilder]: For program point L83(line 83) no Hoare annotation was computed. [2021-11-20 05:37:58,387 INFO L854 garLoopResultBuilder]: At program point L306(line 306) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse0 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse2 .cse4) (or .cse3 .cse0 .cse1))) [2021-11-20 05:37:58,387 INFO L854 garLoopResultBuilder]: At program point L302(line 302) the Hoare annotation is: (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse2 .cse4) (or .cse3 .cse5 .cse4) (or .cse3 .cse1 .cse5) (or .cse3 .cse1 .cse2) (or .cse1 .cse5 (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~2#1|))))) [2021-11-20 05:37:58,387 INFO L854 garLoopResultBuilder]: At program point L298(line 298) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (= 0 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse2 .cse5) (or .cse4 .cse3 .cse5) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2))) [2021-11-20 05:37:58,387 INFO L858 garLoopResultBuilder]: For program point L298-1(line 298) no Hoare annotation was computed. [2021-11-20 05:37:58,387 INFO L854 garLoopResultBuilder]: At program point L59(line 59) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse7 .cse6)) (.cse3 (not (= 0 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse0 .cse5 .cse2 .cse6) (or .cse7 .cse5 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse5 (<= 2 ~waterLevel~0) .cse4) (or .cse0 .cse5 .cse4 .cse6)))) [2021-11-20 05:37:58,388 INFO L858 garLoopResultBuilder]: For program point L59-1(line 59) no Hoare annotation was computed. [2021-11-20 05:37:58,388 INFO L854 garLoopResultBuilder]: At program point L311(line 311) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse5 .cse4) (or .cse0 .cse5 .cse2))) [2021-11-20 05:37:58,388 INFO L854 garLoopResultBuilder]: At program point L311-1(lines 292 316) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2) (or .cse0 .cse5 .cse6) (or .cse0 .cse2 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 (<= 2 ~waterLevel~0) .cse5) (or .cse0 .cse1 .cse5 .cse3))) [2021-11-20 05:37:58,388 INFO L858 garLoopResultBuilder]: For program point L245-1(lines 245 251) no Hoare annotation was computed. [2021-11-20 05:37:58,388 INFO L854 garLoopResultBuilder]: At program point L84(lines 79 86) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse2 .cse1 .cse4) (or .cse0 .cse3))) [2021-11-20 05:37:58,388 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 234 257) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse7)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse4 .cse6) (or .cse5 .cse2 .cse6)))) [2021-11-20 05:37:58,389 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 234 257) no Hoare annotation was computed. [2021-11-20 05:37:58,389 INFO L858 garLoopResultBuilder]: For program point L138(lines 138 142) no Hoare annotation was computed. [2021-11-20 05:37:58,389 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 83) no Hoare annotation was computed. [2021-11-20 05:37:58,389 INFO L854 garLoopResultBuilder]: At program point L138-2(lines 134 145) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (= 0 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse2 .cse5) (or .cse4 .cse3 .cse5) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2))) [2021-11-20 05:37:58,389 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 170 178) the Hoare annotation is: true [2021-11-20 05:37:58,389 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 170 178) no Hoare annotation was computed. [2021-11-20 05:37:58,389 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 170 178) no Hoare annotation was computed. [2021-11-20 05:37:58,390 INFO L861 garLoopResultBuilder]: At program point L944(lines 937 946) the Hoare annotation is: true [2021-11-20 05:37:58,390 INFO L854 garLoopResultBuilder]: At program point L106(lines 102 108) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:37:58,390 INFO L858 garLoopResultBuilder]: For program point L453(lines 452 499) no Hoare annotation was computed. [2021-11-20 05:37:58,390 INFO L858 garLoopResultBuilder]: For program point L482(lines 482 495) no Hoare annotation was computed. [2021-11-20 05:37:58,390 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 05:37:58,390 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 05:37:58,390 INFO L858 garLoopResultBuilder]: For program point L957(lines 957 964) no Hoare annotation was computed. [2021-11-20 05:37:58,391 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 05:37:58,391 INFO L858 garLoopResultBuilder]: For program point L957-2(lines 957 964) no Hoare annotation was computed. [2021-11-20 05:37:58,391 INFO L854 garLoopResultBuilder]: At program point L474(line 474) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2021-11-20 05:37:58,391 INFO L861 garLoopResultBuilder]: At program point L503(lines 442 507) the Hoare annotation is: true [2021-11-20 05:37:58,391 INFO L854 garLoopResultBuilder]: At program point L437(lines 425 439) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2021-11-20 05:37:58,391 INFO L858 garLoopResultBuilder]: For program point L462(lines 462 468) no Hoare annotation was computed. [2021-11-20 05:37:58,391 INFO L858 garLoopResultBuilder]: For program point L462-1(lines 462 468) no Hoare annotation was computed. [2021-11-20 05:37:58,391 INFO L858 garLoopResultBuilder]: For program point L429(lines 429 435) no Hoare annotation was computed. [2021-11-20 05:37:58,392 INFO L858 garLoopResultBuilder]: For program point L429-1(lines 429 435) no Hoare annotation was computed. [2021-11-20 05:37:58,392 INFO L858 garLoopResultBuilder]: For program point L454(lines 454 458) no Hoare annotation was computed. [2021-11-20 05:37:58,392 INFO L861 garLoopResultBuilder]: At program point L966(lines 947 969) the Hoare annotation is: true [2021-11-20 05:37:58,392 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 05:37:58,392 INFO L854 garLoopResultBuilder]: At program point L500(lines 451 501) the Hoare annotation is: false [2021-11-20 05:37:58,392 INFO L858 garLoopResultBuilder]: For program point L488(lines 488 494) no Hoare annotation was computed. [2021-11-20 05:37:58,392 INFO L854 garLoopResultBuilder]: At program point L934(lines 930 936) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:37:58,393 INFO L854 garLoopResultBuilder]: At program point L488-2(lines 482 495) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse2) (and .cse0 .cse5 .cse2 .cse3) (and .cse5 .cse4 .cse2))) [2021-11-20 05:37:58,393 INFO L854 garLoopResultBuilder]: At program point L121(lines 116 124) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:37:58,393 INFO L858 garLoopResultBuilder]: For program point L472(lines 472 478) no Hoare annotation was computed. [2021-11-20 05:37:58,393 INFO L858 garLoopResultBuilder]: For program point L472-1(lines 472 478) no Hoare annotation was computed. [2021-11-20 05:37:58,393 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:37:58,393 INFO L854 garLoopResultBuilder]: At program point L497(lines 452 499) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2021-11-20 05:37:58,394 INFO L854 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2021-11-20 05:37:58,394 INFO L854 garLoopResultBuilder]: At program point L431(line 431) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse4 .cse2 .cse5) (and .cse3 .cse1 .cse2) (and .cse0 .cse4 .cse2 .cse5))) [2021-11-20 05:37:58,394 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 146 157) no Hoare annotation was computed. [2021-11-20 05:37:58,394 INFO L858 garLoopResultBuilder]: For program point L150-1(lines 146 157) no Hoare annotation was computed. [2021-11-20 05:37:58,394 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 146 157) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse5 .cse4 .cse2) (or .cse0 .cse5 .cse1 .cse2))) [2021-11-20 05:37:58,394 INFO L858 garLoopResultBuilder]: For program point L415(lines 415 419) no Hoare annotation was computed. [2021-11-20 05:37:58,394 INFO L858 garLoopResultBuilder]: For program point L415-2(lines 415 419) no Hoare annotation was computed. [2021-11-20 05:37:58,394 INFO L854 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2021-11-20 05:37:58,395 INFO L858 garLoopResultBuilder]: For program point L285-1(lines 266 290) no Hoare annotation was computed. [2021-11-20 05:37:58,395 INFO L858 garLoopResultBuilder]: For program point L215(lines 215 221) no Hoare annotation was computed. [2021-11-20 05:37:58,395 INFO L854 garLoopResultBuilder]: At program point L220(lines 211 224) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 1)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2 .cse4))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse4) (and .cse2 .cse3)))) [2021-11-20 05:37:58,395 INFO L854 garLoopResultBuilder]: At program point L280(line 280) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse1 .cse2) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2021-11-20 05:37:58,395 INFO L858 garLoopResultBuilder]: For program point L274(lines 274 282) no Hoare annotation was computed. [2021-11-20 05:37:58,395 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 266 290) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2021-11-20 05:37:58,395 INFO L858 garLoopResultBuilder]: For program point L270(lines 270 287) no Hoare annotation was computed. [2021-11-20 05:37:58,396 INFO L858 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2021-11-20 05:37:58,396 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 266 290) no Hoare annotation was computed. [2021-11-20 05:37:58,396 INFO L854 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2021-11-20 05:37:58,396 INFO L854 garLoopResultBuilder]: At program point L332-2(lines 325 341) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) .cse1 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~3#1|))) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2021-11-20 05:37:58,396 INFO L858 garLoopResultBuilder]: For program point L330-1(line 330) no Hoare annotation was computed. [2021-11-20 05:37:58,396 INFO L854 garLoopResultBuilder]: At program point L421(lines 406 424) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse5)) (.cse7 (<= 2 ~waterLevel~0)) (.cse1 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse6 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (and (let ((.cse4 (= ~methaneLevelCritical~0 0))) (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (not .cse4) (and .cse2 .cse3 .cse4 .cse7 .cse5))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 .cse3 .cse7) (and .cse1 .cse2 .cse3 .cse6) (not (<= 1 ~methaneLevelCritical~0)))))) [2021-11-20 05:37:58,396 INFO L854 garLoopResultBuilder]: At program point L322(lines 317 324) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))))) [2021-11-20 05:37:58,397 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 350 360) the Hoare annotation is: true [2021-11-20 05:37:58,397 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 350 360) no Hoare annotation was computed. [2021-11-20 05:37:58,397 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 350 360) no Hoare annotation was computed. [2021-11-20 05:37:58,397 INFO L861 garLoopResultBuilder]: At program point L355(line 355) the Hoare annotation is: true [2021-11-20 05:37:58,397 INFO L858 garLoopResultBuilder]: For program point L355-1(line 355) no Hoare annotation was computed. [2021-11-20 05:37:58,400 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:37:58,402 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 05:37:58,429 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 05:37:58 BoogieIcfgContainer [2021-11-20 05:37:58,429 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 05:37:58,429 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 05:37:58,429 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 05:37:58,430 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 05:37:58,430 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:37:47" (3/4) ... [2021-11-20 05:37:58,433 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 05:37:58,439 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-20 05:37:58,439 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 05:37:58,439 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 05:37:58,439 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 05:37:58,439 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 05:37:58,440 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-11-20 05:37:58,440 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 05:37:58,440 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-11-20 05:37:58,440 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-11-20 05:37:58,450 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges [2021-11-20 05:37:58,451 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 05:37:58,452 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 05:37:58,452 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 05:37:58,453 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 05:37:58,453 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 05:37:58,454 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 05:37:58,479 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2021-11-20 05:37:58,480 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) [2021-11-20 05:37:58,482 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel)) && (((((pumpRunning == 0 && tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) [2021-11-20 05:37:58,483 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2021-11-20 05:37:58,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2021-11-20 05:37:58,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2021-11-20 05:37:58,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && \result == 1)) || (pumpRunning == 0 && 2 <= waterLevel)) [2021-11-20 05:37:58,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2021-11-20 05:37:58,485 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) [2021-11-20 05:37:58,531 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 05:37:58,532 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 05:37:58,533 INFO L158 Benchmark]: Toolchain (without parser) took 12193.77ms. Allocated memory was 117.4MB in the beginning and 172.0MB in the end (delta: 54.5MB). Free memory was 77.9MB in the beginning and 96.4MB in the end (delta: -18.6MB). Peak memory consumption was 36.5MB. Max. memory is 16.1GB. [2021-11-20 05:37:58,533 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory is still 95.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 05:37:58,533 INFO L158 Benchmark]: CACSL2BoogieTranslator took 509.47ms. Allocated memory is still 117.4MB. Free memory was 77.6MB in the beginning and 81.3MB in the end (delta: -3.7MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-11-20 05:37:58,533 INFO L158 Benchmark]: Boogie Procedure Inliner took 53.68ms. Allocated memory is still 117.4MB. Free memory was 81.3MB in the beginning and 78.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 05:37:58,534 INFO L158 Benchmark]: Boogie Preprocessor took 30.04ms. Allocated memory is still 117.4MB. Free memory was 78.9MB in the beginning and 77.3MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 05:37:58,535 INFO L158 Benchmark]: RCFGBuilder took 583.24ms. Allocated memory is still 117.4MB. Free memory was 77.3MB in the beginning and 61.0MB in the end (delta: 16.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-20 05:37:58,535 INFO L158 Benchmark]: TraceAbstraction took 10901.80ms. Allocated memory was 117.4MB in the beginning and 172.0MB in the end (delta: 54.5MB). Free memory was 60.5MB in the beginning and 103.8MB in the end (delta: -43.3MB). Peak memory consumption was 74.6MB. Max. memory is 16.1GB. [2021-11-20 05:37:58,535 INFO L158 Benchmark]: Witness Printer took 102.28ms. Allocated memory is still 172.0MB. Free memory was 102.7MB in the beginning and 96.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-20 05:37:58,537 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory is still 95.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 509.47ms. Allocated memory is still 117.4MB. Free memory was 77.6MB in the beginning and 81.3MB in the end (delta: -3.7MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 53.68ms. Allocated memory is still 117.4MB. Free memory was 81.3MB in the beginning and 78.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.04ms. Allocated memory is still 117.4MB. Free memory was 78.9MB in the beginning and 77.3MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 583.24ms. Allocated memory is still 117.4MB. Free memory was 77.3MB in the beginning and 61.0MB in the end (delta: 16.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 10901.80ms. Allocated memory was 117.4MB in the beginning and 172.0MB in the end (delta: 54.5MB). Free memory was 60.5MB in the beginning and 103.8MB in the end (delta: -43.3MB). Peak memory consumption was 74.6MB. Max. memory is 16.1GB. * Witness Printer took 102.28ms. Allocated memory is still 172.0MB. Free memory was 102.7MB in the beginning and 96.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 83]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.8s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1505 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1468 mSDsluCounter, 4161 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2790 mSDsCounter, 515 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1551 IncrementalHoareTripleChecker+Invalid, 2066 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 515 mSolverCounterUnsat, 1371 mSDtfsCounter, 1551 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 359 GetRequests, 262 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1049occurred in iteration=8, InterpolantAutomatonStates: 81, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 139 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 2324 PreInvPairs, 2637 NumberOfFragments, 1730 HoareAnnotationTreeSize, 2324 FomulaSimplifications, 1480 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 45 FomulaSimplificationsInter, 13217 FormulaSimplificationTreeSizeReductionInter, 3.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 742 NumberOfCodeBlocks, 742 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 729 ConstructedInterpolants, 0 QuantifiedInterpolants, 1349 SizeOfPredicates, 6 NumberOfNonLiveVariables, 863 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 113/127 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 79]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && \result == 1)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive)) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 53]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel)) && (((((pumpRunning == 0 && tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-11-20 05:37:58,614 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b2364a2e-9a6d-42f7-8609-5fa6cf703f03/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE