./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 592117a566b45deb7ab0407540eecbf2be0f732724f0529483f85e7a6864867a --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 07:40:06,097 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 07:40:06,099 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 07:40:06,132 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 07:40:06,133 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 07:40:06,134 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 07:40:06,136 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 07:40:06,138 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 07:40:06,140 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 07:40:06,141 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 07:40:06,142 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 07:40:06,144 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 07:40:06,145 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 07:40:06,146 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 07:40:06,148 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 07:40:06,149 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 07:40:06,150 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 07:40:06,151 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 07:40:06,154 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 07:40:06,160 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 07:40:06,164 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 07:40:06,166 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 07:40:06,168 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 07:40:06,170 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 07:40:06,175 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 07:40:06,176 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 07:40:06,177 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 07:40:06,179 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 07:40:06,179 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 07:40:06,181 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 07:40:06,182 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 07:40:06,183 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 07:40:06,185 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 07:40:06,186 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 07:40:06,188 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 07:40:06,188 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 07:40:06,189 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 07:40:06,189 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 07:40:06,190 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 07:40:06,191 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 07:40:06,191 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 07:40:06,192 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 07:40:06,237 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 07:40:06,237 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 07:40:06,238 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 07:40:06,238 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 07:40:06,246 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 07:40:06,246 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 07:40:06,247 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 07:40:06,247 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 07:40:06,248 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 07:40:06,248 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 07:40:06,249 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 07:40:06,249 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 07:40:06,250 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 07:40:06,250 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 07:40:06,250 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 07:40:06,250 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 07:40:06,251 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 07:40:06,251 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 07:40:06,251 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 07:40:06,251 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 07:40:06,251 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 07:40:06,252 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 07:40:06,252 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 07:40:06,252 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 07:40:06,252 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:40:06,253 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 07:40:06,253 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 07:40:06,253 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 07:40:06,253 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 07:40:06,253 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 07:40:06,254 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 07:40:06,254 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 07:40:06,254 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 07:40:06,255 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 07:40:06,255 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 592117a566b45deb7ab0407540eecbf2be0f732724f0529483f85e7a6864867a [2021-11-20 07:40:06,516 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 07:40:06,539 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 07:40:06,542 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 07:40:06,543 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 07:40:06,544 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 07:40:06,545 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c [2021-11-20 07:40:06,648 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/data/7b60c490b/0983a6b79bda437e82a7d092668bb021/FLAGd1d85a382 [2021-11-20 07:40:07,200 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 07:40:07,201 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c [2021-11-20 07:40:07,216 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/data/7b60c490b/0983a6b79bda437e82a7d092668bb021/FLAGd1d85a382 [2021-11-20 07:40:07,482 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/data/7b60c490b/0983a6b79bda437e82a7d092668bb021 [2021-11-20 07:40:07,485 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 07:40:07,486 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 07:40:07,500 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 07:40:07,501 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 07:40:07,504 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 07:40:07,505 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:40:07" (1/1) ... [2021-11-20 07:40:07,509 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4107d5c0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:07, skipping insertion in model container [2021-11-20 07:40:07,509 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:40:07" (1/1) ... [2021-11-20 07:40:07,516 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 07:40:07,559 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 07:40:07,922 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c[19185,19198] [2021-11-20 07:40:07,926 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:40:07,944 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 07:40:08,062 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/sv-benchmarks/c/product-lines/minepump_spec1_product62.cil.c[19185,19198] [2021-11-20 07:40:08,063 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:40:08,090 INFO L208 MainTranslator]: Completed translation [2021-11-20 07:40:08,090 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08 WrapperNode [2021-11-20 07:40:08,091 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 07:40:08,092 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 07:40:08,092 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 07:40:08,092 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 07:40:08,100 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,128 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,164 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 271 [2021-11-20 07:40:08,164 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 07:40:08,165 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 07:40:08,165 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 07:40:08,166 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 07:40:08,174 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,175 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,178 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,179 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,186 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,191 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,194 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,197 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 07:40:08,198 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 07:40:08,198 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 07:40:08,198 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 07:40:08,199 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (1/1) ... [2021-11-20 07:40:08,207 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:40:08,222 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:40:08,253 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 07:40:08,255 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 07:40:08,289 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 07:40:08,289 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 07:40:08,289 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 07:40:08,289 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 07:40:08,289 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 07:40:08,290 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-11-20 07:40:08,290 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-11-20 07:40:08,290 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 07:40:08,290 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 07:40:08,290 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 07:40:08,290 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 07:40:08,290 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 07:40:08,291 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 07:40:08,291 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-11-20 07:40:08,291 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-11-20 07:40:08,291 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-11-20 07:40:08,291 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-11-20 07:40:08,291 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-20 07:40:08,291 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-20 07:40:08,291 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 07:40:08,292 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 07:40:08,292 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 07:40:08,292 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 07:40:08,292 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 07:40:08,369 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 07:40:08,371 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 07:40:08,792 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 07:40:08,801 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 07:40:08,801 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 07:40:08,803 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:40:08 BoogieIcfgContainer [2021-11-20 07:40:08,804 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 07:40:08,806 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 07:40:08,806 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 07:40:08,815 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 07:40:08,816 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 07:40:07" (1/3) ... [2021-11-20 07:40:08,817 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32aa5f91 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:40:08, skipping insertion in model container [2021-11-20 07:40:08,818 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:40:08" (2/3) ... [2021-11-20 07:40:08,818 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32aa5f91 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:40:08, skipping insertion in model container [2021-11-20 07:40:08,818 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:40:08" (3/3) ... [2021-11-20 07:40:08,820 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product62.cil.c [2021-11-20 07:40:08,829 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 07:40:08,829 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 07:40:08,896 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 07:40:08,907 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 07:40:08,907 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 07:40:08,940 INFO L276 IsEmpty]: Start isEmpty. Operand has 109 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 89 states have internal predecessors, (108), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-11-20 07:40:08,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2021-11-20 07:40:08,951 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:08,951 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:08,952 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:08,958 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:08,959 INFO L85 PathProgramCache]: Analyzing trace with hash 1689838058, now seen corresponding path program 1 times [2021-11-20 07:40:08,967 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:08,968 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1926521379] [2021-11-20 07:40:08,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:08,970 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:09,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:09,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:40:09,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:09,207 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:40:09,208 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:09,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1926521379] [2021-11-20 07:40:09,209 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1926521379] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:09,209 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:09,210 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 07:40:09,211 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1667612450] [2021-11-20 07:40:09,212 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:09,216 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 07:40:09,216 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:09,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 07:40:09,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 07:40:09,257 INFO L87 Difference]: Start difference. First operand has 109 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 89 states have internal predecessors, (108), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:40:09,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:09,313 INFO L93 Difference]: Finished difference Result 210 states and 283 transitions. [2021-11-20 07:40:09,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 07:40:09,316 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2021-11-20 07:40:09,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:09,326 INFO L225 Difference]: With dead ends: 210 [2021-11-20 07:40:09,326 INFO L226 Difference]: Without dead ends: 100 [2021-11-20 07:40:09,330 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 07:40:09,334 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:09,335 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:40:09,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2021-11-20 07:40:09,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2021-11-20 07:40:09,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 72 states have (on average 1.3055555555555556) internal successors, (94), 81 states have internal predecessors, (94), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-11-20 07:40:09,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 129 transitions. [2021-11-20 07:40:09,384 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 129 transitions. Word has length 23 [2021-11-20 07:40:09,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:09,385 INFO L470 AbstractCegarLoop]: Abstraction has 100 states and 129 transitions. [2021-11-20 07:40:09,385 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:40:09,386 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 129 transitions. [2021-11-20 07:40:09,388 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-11-20 07:40:09,389 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:09,389 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:09,389 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 07:40:09,389 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:09,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:09,390 INFO L85 PathProgramCache]: Analyzing trace with hash 1112714422, now seen corresponding path program 1 times [2021-11-20 07:40:09,390 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:09,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1917349303] [2021-11-20 07:40:09,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:09,391 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:09,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:09,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 07:40:09,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:09,493 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:40:09,494 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:09,494 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1917349303] [2021-11-20 07:40:09,494 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1917349303] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:09,494 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:09,494 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 07:40:09,495 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1094571174] [2021-11-20 07:40:09,495 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:09,496 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:40:09,497 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:09,497 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:40:09,497 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:40:09,498 INFO L87 Difference]: Start difference. First operand 100 states and 129 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:40:09,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:09,520 INFO L93 Difference]: Finished difference Result 165 states and 213 transitions. [2021-11-20 07:40:09,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:40:09,521 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2021-11-20 07:40:09,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:09,524 INFO L225 Difference]: With dead ends: 165 [2021-11-20 07:40:09,524 INFO L226 Difference]: Without dead ends: 91 [2021-11-20 07:40:09,525 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:40:09,527 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 13 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:09,528 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 215 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:40:09,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2021-11-20 07:40:09,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2021-11-20 07:40:09,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 75 states have internal predecessors, (87), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-20 07:40:09,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 117 transitions. [2021-11-20 07:40:09,544 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 117 transitions. Word has length 24 [2021-11-20 07:40:09,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:09,544 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 117 transitions. [2021-11-20 07:40:09,545 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:40:09,545 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2021-11-20 07:40:09,547 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2021-11-20 07:40:09,547 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:09,547 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:09,548 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 07:40:09,548 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:09,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:09,549 INFO L85 PathProgramCache]: Analyzing trace with hash -1697557311, now seen corresponding path program 1 times [2021-11-20 07:40:09,549 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:09,549 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [221517083] [2021-11-20 07:40:09,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:09,550 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:09,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:09,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:40:09,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:09,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:40:09,693 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:09,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [221517083] [2021-11-20 07:40:09,694 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [221517083] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:09,694 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:09,695 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:40:09,695 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1373157990] [2021-11-20 07:40:09,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:09,696 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:40:09,696 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:09,699 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:40:09,699 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:40:09,700 INFO L87 Difference]: Start difference. First operand 91 states and 117 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:40:09,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:09,825 INFO L93 Difference]: Finished difference Result 175 states and 228 transitions. [2021-11-20 07:40:09,826 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 07:40:09,826 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2021-11-20 07:40:09,827 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:09,828 INFO L225 Difference]: With dead ends: 175 [2021-11-20 07:40:09,832 INFO L226 Difference]: Without dead ends: 91 [2021-11-20 07:40:09,833 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:40:09,835 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 142 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:09,836 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [142 Valid, 298 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:40:09,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2021-11-20 07:40:09,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2021-11-20 07:40:09,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 66 states have (on average 1.303030303030303) internal successors, (86), 75 states have internal predecessors, (86), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-20 07:40:09,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 116 transitions. [2021-11-20 07:40:09,871 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 116 transitions. Word has length 29 [2021-11-20 07:40:09,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:09,872 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 116 transitions. [2021-11-20 07:40:09,872 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:40:09,872 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 116 transitions. [2021-11-20 07:40:09,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-11-20 07:40:09,875 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:09,875 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:09,875 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 07:40:09,875 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:09,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:09,876 INFO L85 PathProgramCache]: Analyzing trace with hash -189961352, now seen corresponding path program 1 times [2021-11-20 07:40:09,876 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:09,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [149073634] [2021-11-20 07:40:09,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:09,877 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:09,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:40:10,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:10,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:10,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 07:40:10,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,036 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:40:10,036 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:10,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [149073634] [2021-11-20 07:40:10,037 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [149073634] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:10,037 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:10,037 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:40:10,037 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1234081146] [2021-11-20 07:40:10,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:10,038 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:40:10,038 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:10,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:40:10,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:40:10,039 INFO L87 Difference]: Start difference. First operand 91 states and 116 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:40:10,370 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:10,370 INFO L93 Difference]: Finished difference Result 261 states and 330 transitions. [2021-11-20 07:40:10,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:40:10,371 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 44 [2021-11-20 07:40:10,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:10,374 INFO L225 Difference]: With dead ends: 261 [2021-11-20 07:40:10,375 INFO L226 Difference]: Without dead ends: 177 [2021-11-20 07:40:10,376 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:40:10,381 INFO L933 BasicCegarLoop]: 143 mSDtfsCounter, 198 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 319 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:10,382 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [200 Valid, 319 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 07:40:10,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 177 states. [2021-11-20 07:40:10,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 177 to 171. [2021-11-20 07:40:10,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 125 states have (on average 1.232) internal successors, (154), 134 states have internal predecessors, (154), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2021-11-20 07:40:10,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 205 transitions. [2021-11-20 07:40:10,447 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 205 transitions. Word has length 44 [2021-11-20 07:40:10,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:10,447 INFO L470 AbstractCegarLoop]: Abstraction has 171 states and 205 transitions. [2021-11-20 07:40:10,448 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:40:10,448 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 205 transitions. [2021-11-20 07:40:10,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-11-20 07:40:10,450 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:10,450 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:10,451 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 07:40:10,451 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:10,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:10,452 INFO L85 PathProgramCache]: Analyzing trace with hash 963666416, now seen corresponding path program 1 times [2021-11-20 07:40:10,452 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:10,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [454622465] [2021-11-20 07:40:10,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:10,456 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:10,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:40:10,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:10,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:10,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 07:40:10,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:10,649 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:40:10,650 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:10,651 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [454622465] [2021-11-20 07:40:10,651 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [454622465] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:10,651 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:10,651 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 07:40:10,652 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [98980380] [2021-11-20 07:40:10,652 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:10,654 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:40:10,655 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:10,656 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:40:10,656 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:40:10,656 INFO L87 Difference]: Start difference. First operand 171 states and 205 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 07:40:10,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:10,936 INFO L93 Difference]: Finished difference Result 187 states and 221 transitions. [2021-11-20 07:40:10,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-11-20 07:40:10,937 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2021-11-20 07:40:10,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:10,946 INFO L225 Difference]: With dead ends: 187 [2021-11-20 07:40:10,946 INFO L226 Difference]: Without dead ends: 185 [2021-11-20 07:40:10,948 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2021-11-20 07:40:10,955 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 144 mSDsluCounter, 316 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 433 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:10,957 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [150 Valid, 433 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:40:10,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2021-11-20 07:40:10,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 171. [2021-11-20 07:40:10,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 125 states have (on average 1.216) internal successors, (152), 134 states have internal predecessors, (152), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2021-11-20 07:40:10,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 203 transitions. [2021-11-20 07:40:10,991 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 203 transitions. Word has length 50 [2021-11-20 07:40:10,992 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:10,992 INFO L470 AbstractCegarLoop]: Abstraction has 171 states and 203 transitions. [2021-11-20 07:40:10,992 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 07:40:10,993 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 203 transitions. [2021-11-20 07:40:10,995 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-20 07:40:10,995 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:10,995 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:10,996 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 07:40:10,996 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:10,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:10,997 INFO L85 PathProgramCache]: Analyzing trace with hash -158889570, now seen corresponding path program 1 times [2021-11-20 07:40:10,997 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:10,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [270599191] [2021-11-20 07:40:10,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:10,997 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:11,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:40:11,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:11,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:11,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:11,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 07:40:11,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,164 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:40:11,164 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:11,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [270599191] [2021-11-20 07:40:11,165 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [270599191] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:11,165 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:11,165 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 07:40:11,165 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1778730317] [2021-11-20 07:40:11,166 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:11,168 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:40:11,169 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:11,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:40:11,170 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:40:11,171 INFO L87 Difference]: Start difference. First operand 171 states and 203 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 07:40:11,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:11,357 INFO L93 Difference]: Finished difference Result 345 states and 418 transitions. [2021-11-20 07:40:11,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:40:11,358 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2021-11-20 07:40:11,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:11,362 INFO L225 Difference]: With dead ends: 345 [2021-11-20 07:40:11,362 INFO L226 Difference]: Without dead ends: 181 [2021-11-20 07:40:11,364 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:40:11,367 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 76 mSDsluCounter, 314 mSDsCounter, 0 mSdLazyCounter, 136 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 136 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:11,372 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [81 Valid, 419 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:40:11,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 181 states. [2021-11-20 07:40:11,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 181 to 174. [2021-11-20 07:40:11,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174 states, 128 states have (on average 1.2109375) internal successors, (155), 137 states have internal predecessors, (155), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2021-11-20 07:40:11,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 206 transitions. [2021-11-20 07:40:11,411 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 206 transitions. Word has length 60 [2021-11-20 07:40:11,412 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:11,412 INFO L470 AbstractCegarLoop]: Abstraction has 174 states and 206 transitions. [2021-11-20 07:40:11,412 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 07:40:11,413 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 206 transitions. [2021-11-20 07:40:11,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-20 07:40:11,424 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:11,425 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:11,425 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 07:40:11,426 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:11,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:11,426 INFO L85 PathProgramCache]: Analyzing trace with hash 115870044, now seen corresponding path program 1 times [2021-11-20 07:40:11,426 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:11,427 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [414432290] [2021-11-20 07:40:11,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:11,427 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:11,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:40:11,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:11,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:11,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:11,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 07:40:11,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,624 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:40:11,624 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:11,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [414432290] [2021-11-20 07:40:11,625 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [414432290] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:11,625 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:11,625 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 07:40:11,625 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [612449427] [2021-11-20 07:40:11,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:11,628 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 07:40:11,632 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:11,633 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 07:40:11,634 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:40:11,634 INFO L87 Difference]: Start difference. First operand 174 states and 206 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 07:40:11,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:11,861 INFO L93 Difference]: Finished difference Result 354 states and 428 transitions. [2021-11-20 07:40:11,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 07:40:11,861 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2021-11-20 07:40:11,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:11,870 INFO L225 Difference]: With dead ends: 354 [2021-11-20 07:40:11,870 INFO L226 Difference]: Without dead ends: 187 [2021-11-20 07:40:11,871 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2021-11-20 07:40:11,874 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 116 mSDsluCounter, 365 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 471 SdHoareTripleChecker+Invalid, 224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:11,875 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [122 Valid, 471 Invalid, 224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:40:11,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2021-11-20 07:40:11,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 176. [2021-11-20 07:40:11,905 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 130 states have (on average 1.2076923076923076) internal successors, (157), 139 states have internal predecessors, (157), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2021-11-20 07:40:11,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 208 transitions. [2021-11-20 07:40:11,907 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 208 transitions. Word has length 60 [2021-11-20 07:40:11,907 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:11,907 INFO L470 AbstractCegarLoop]: Abstraction has 176 states and 208 transitions. [2021-11-20 07:40:11,908 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 07:40:11,908 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 208 transitions. [2021-11-20 07:40:11,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-20 07:40:11,909 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:11,909 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:11,913 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 07:40:11,913 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:11,913 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:11,914 INFO L85 PathProgramCache]: Analyzing trace with hash -2128113254, now seen corresponding path program 1 times [2021-11-20 07:40:11,914 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:11,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [893059228] [2021-11-20 07:40:11,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:11,915 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:11,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:40:11,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:11,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:11,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:12,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:12,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 07:40:12,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,035 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:40:12,036 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:12,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [893059228] [2021-11-20 07:40:12,036 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [893059228] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:12,036 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:12,036 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:40:12,036 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [913434969] [2021-11-20 07:40:12,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:12,037 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:40:12,037 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:12,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:40:12,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:40:12,037 INFO L87 Difference]: Start difference. First operand 176 states and 208 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-20 07:40:12,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:12,281 INFO L93 Difference]: Finished difference Result 472 states and 588 transitions. [2021-11-20 07:40:12,282 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:40:12,282 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2021-11-20 07:40:12,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:12,285 INFO L225 Difference]: With dead ends: 472 [2021-11-20 07:40:12,285 INFO L226 Difference]: Without dead ends: 303 [2021-11-20 07:40:12,286 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:40:12,287 INFO L933 BasicCegarLoop]: 157 mSDtfsCounter, 218 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 350 SdHoareTripleChecker+Invalid, 243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:12,287 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [226 Valid, 350 Invalid, 243 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:40:12,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 303 states. [2021-11-20 07:40:12,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 303 to 301. [2021-11-20 07:40:12,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 223 states have (on average 1.201793721973094) internal successors, (268), 236 states have internal predecessors, (268), 39 states have call successors, (39), 35 states have call predecessors, (39), 38 states have return successors, (58), 40 states have call predecessors, (58), 39 states have call successors, (58) [2021-11-20 07:40:12,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 365 transitions. [2021-11-20 07:40:12,313 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 365 transitions. Word has length 60 [2021-11-20 07:40:12,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:12,313 INFO L470 AbstractCegarLoop]: Abstraction has 301 states and 365 transitions. [2021-11-20 07:40:12,313 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-20 07:40:12,314 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 365 transitions. [2021-11-20 07:40:12,314 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-11-20 07:40:12,315 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:12,315 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:12,315 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 07:40:12,315 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:12,316 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:12,316 INFO L85 PathProgramCache]: Analyzing trace with hash -183762560, now seen corresponding path program 1 times [2021-11-20 07:40:12,316 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:12,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [403973870] [2021-11-20 07:40:12,316 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:12,317 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:12,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 07:40:12,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 07:40:12,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:12,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:12,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:12,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-11-20 07:40:12,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:12,484 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:40:12,484 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:12,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [403973870] [2021-11-20 07:40:12,485 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [403973870] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:12,485 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:40:12,485 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-11-20 07:40:12,485 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [421452479] [2021-11-20 07:40:12,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:12,485 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-11-20 07:40:12,486 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:12,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-11-20 07:40:12,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2021-11-20 07:40:12,486 INFO L87 Difference]: Start difference. First operand 301 states and 365 transitions. Second operand has 12 states, 12 states have (on average 4.083333333333333) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-20 07:40:13,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:13,415 INFO L93 Difference]: Finished difference Result 931 states and 1173 transitions. [2021-11-20 07:40:13,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-20 07:40:13,416 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.083333333333333) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 64 [2021-11-20 07:40:13,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:13,423 INFO L225 Difference]: With dead ends: 931 [2021-11-20 07:40:13,423 INFO L226 Difference]: Without dead ends: 637 [2021-11-20 07:40:13,426 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2021-11-20 07:40:13,428 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 381 mSDsluCounter, 516 mSDsCounter, 0 mSdLazyCounter, 862 mSolverCounterSat, 187 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 389 SdHoareTripleChecker+Valid, 620 SdHoareTripleChecker+Invalid, 1049 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 187 IncrementalHoareTripleChecker+Valid, 862 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:13,428 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [389 Valid, 620 Invalid, 1049 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [187 Valid, 862 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-20 07:40:13,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 637 states. [2021-11-20 07:40:13,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 637 to 612. [2021-11-20 07:40:13,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 612 states, 447 states have (on average 1.1767337807606264) internal successors, (526), 477 states have internal predecessors, (526), 86 states have call successors, (86), 68 states have call predecessors, (86), 78 states have return successors, (135), 86 states have call predecessors, (135), 86 states have call successors, (135) [2021-11-20 07:40:13,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 612 states to 612 states and 747 transitions. [2021-11-20 07:40:13,505 INFO L78 Accepts]: Start accepts. Automaton has 612 states and 747 transitions. Word has length 64 [2021-11-20 07:40:13,505 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:13,505 INFO L470 AbstractCegarLoop]: Abstraction has 612 states and 747 transitions. [2021-11-20 07:40:13,505 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.083333333333333) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-20 07:40:13,505 INFO L276 IsEmpty]: Start isEmpty. Operand 612 states and 747 transitions. [2021-11-20 07:40:13,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-11-20 07:40:13,514 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:40:13,514 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:13,515 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 07:40:13,516 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:40:13,516 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:40:13,516 INFO L85 PathProgramCache]: Analyzing trace with hash 971206854, now seen corresponding path program 1 times [2021-11-20 07:40:13,516 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:40:13,516 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1026046224] [2021-11-20 07:40:13,516 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:13,517 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:40:13,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 07:40:13,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:40:13,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:40:13,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:13,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:40:13,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:13,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 07:40:13,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-11-20 07:40:13,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2021-11-20 07:40:13,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:40:13,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2021-11-20 07:40:13,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 07:40:13,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:40:13,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-11-20 07:40:13,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,760 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-11-20 07:40:13,760 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:40:13,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1026046224] [2021-11-20 07:40:13,761 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1026046224] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:40:13,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1070737951] [2021-11-20 07:40:13,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:40:13,761 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:40:13,761 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:40:13,764 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:40:13,794 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 07:40:13,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:40:13,892 INFO L263 TraceCheckSpWp]: Trace formula consists of 527 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-20 07:40:13,902 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:40:14,357 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-20 07:40:14,357 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 07:40:14,358 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1070737951] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:40:14,358 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 07:40:14,358 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2021-11-20 07:40:14,358 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1154043593] [2021-11-20 07:40:14,359 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:40:14,360 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 07:40:14,361 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:40:14,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 07:40:14,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2021-11-20 07:40:14,362 INFO L87 Difference]: Start difference. First operand 612 states and 747 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-11-20 07:40:14,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:40:14,534 INFO L93 Difference]: Finished difference Result 1325 states and 1617 transitions. [2021-11-20 07:40:14,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 07:40:14,535 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 123 [2021-11-20 07:40:14,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:40:14,536 INFO L225 Difference]: With dead ends: 1325 [2021-11-20 07:40:14,536 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 07:40:14,540 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2021-11-20 07:40:14,541 INFO L933 BasicCegarLoop]: 202 mSDtfsCounter, 76 mSDsluCounter, 806 mSDsCounter, 0 mSdLazyCounter, 119 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 1008 SdHoareTripleChecker+Invalid, 126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:40:14,542 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 1008 Invalid, 126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:40:14,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 07:40:14,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 07:40:14,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 07:40:14,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 07:40:14,543 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2021-11-20 07:40:14,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:40:14,543 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 07:40:14,544 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-11-20 07:40:14,544 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 07:40:14,544 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 07:40:14,547 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 07:40:14,587 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 07:40:14,764 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-20 07:40:14,766 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 07:40:18,224 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 199 206) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-11-20 07:40:18,224 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 199 206) no Hoare annotation was computed. [2021-11-20 07:40:18,224 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 199 206) no Hoare annotation was computed. [2021-11-20 07:40:18,224 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 89 95) no Hoare annotation was computed. [2021-11-20 07:40:18,224 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 89 95) the Hoare annotation is: true [2021-11-20 07:40:18,225 INFO L858 garLoopResultBuilder]: For program point L291-2(lines 291 295) no Hoare annotation was computed. [2021-11-20 07:40:18,225 INFO L854 garLoopResultBuilder]: At program point L979(lines 974 982) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-11-20 07:40:18,225 INFO L854 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-11-20 07:40:18,225 INFO L854 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-11-20 07:40:18,225 INFO L858 garLoopResultBuilder]: For program point L131(lines 131 139) no Hoare annotation was computed. [2021-11-20 07:40:18,225 INFO L858 garLoopResultBuilder]: For program point L127(lines 127 144) no Hoare annotation was computed. [2021-11-20 07:40:18,225 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 123 147) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-11-20 07:40:18,226 INFO L854 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (or (not .cse0) .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2021-11-20 07:40:18,226 INFO L858 garLoopResultBuilder]: For program point L142-1(lines 123 147) no Hoare annotation was computed. [2021-11-20 07:40:18,226 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 123 147) no Hoare annotation was computed. [2021-11-20 07:40:18,226 INFO L854 garLoopResultBuilder]: At program point L297(lines 282 300) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-11-20 07:40:18,226 INFO L858 garLoopResultBuilder]: For program point L291(lines 291 295) no Hoare annotation was computed. [2021-11-20 07:40:18,226 INFO L858 garLoopResultBuilder]: For program point L911-1(lines 907 918) no Hoare annotation was computed. [2021-11-20 07:40:18,226 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 907 918) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0) (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse0))) [2021-11-20 07:40:18,226 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 907 918) no Hoare annotation was computed. [2021-11-20 07:40:18,226 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 785 814) no Hoare annotation was computed. [2021-11-20 07:40:18,227 INFO L858 garLoopResultBuilder]: For program point L799(lines 799 803) no Hoare annotation was computed. [2021-11-20 07:40:18,227 INFO L861 garLoopResultBuilder]: At program point L799-1(lines 799 803) the Hoare annotation is: true [2021-11-20 07:40:18,227 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 785 814) the Hoare annotation is: true [2021-11-20 07:40:18,227 INFO L858 garLoopResultBuilder]: For program point L796(line 796) no Hoare annotation was computed. [2021-11-20 07:40:18,227 INFO L861 garLoopResultBuilder]: At program point L795-2(lines 795 809) the Hoare annotation is: true [2021-11-20 07:40:18,227 INFO L861 garLoopResultBuilder]: At program point L791(line 791) the Hoare annotation is: true [2021-11-20 07:40:18,227 INFO L858 garLoopResultBuilder]: For program point L791-1(line 791) no Hoare annotation was computed. [2021-11-20 07:40:18,227 INFO L861 garLoopResultBuilder]: At program point L810(lines 785 814) the Hoare annotation is: true [2021-11-20 07:40:18,227 INFO L858 garLoopResultBuilder]: For program point L806(line 806) no Hoare annotation was computed. [2021-11-20 07:40:18,227 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 919 927) the Hoare annotation is: true [2021-11-20 07:40:18,228 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 919 927) no Hoare annotation was computed. [2021-11-20 07:40:18,228 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 919 927) no Hoare annotation was computed. [2021-11-20 07:40:18,228 INFO L858 garLoopResultBuilder]: For program point L993(lines 993 1006) no Hoare annotation was computed. [2021-11-20 07:40:18,228 INFO L854 garLoopResultBuilder]: At program point L993-1(lines 985 1009) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (not .cse4))) (and (let ((.cse0 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~11#1| 0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1) (and .cse2 .cse3 .cse0) (not (= ~methaneLevelCritical~0 0)) .cse4 (and .cse2 .cse5 .cse0 .cse1 .cse6) (and .cse3 .cse5 .cse0 .cse6))) (or (and .cse2 .cse5 .cse1 .cse6) (not (<= 1 ~methaneLevelCritical~0)) (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse3 .cse5 .cse6) .cse4)))) [2021-11-20 07:40:18,228 INFO L854 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse1) (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (and .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-11-20 07:40:18,228 INFO L854 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0)))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2021-11-20 07:40:18,228 INFO L858 garLoopResultBuilder]: For program point L155-1(line 155) no Hoare annotation was computed. [2021-11-20 07:40:18,229 INFO L854 garLoopResultBuilder]: At program point L168(line 168) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2021-11-20 07:40:18,229 INFO L854 garLoopResultBuilder]: At program point L168-1(lines 149 173) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1) (and .cse2 .cse3) (and .cse3 .cse0) (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse1) .cse4) (or (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse3 .cse0) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse0 .cse1) .cse4))) [2021-11-20 07:40:18,229 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 65 88) no Hoare annotation was computed. [2021-11-20 07:40:18,229 INFO L858 garLoopResultBuilder]: For program point L69-1(lines 68 87) no Hoare annotation was computed. [2021-11-20 07:40:18,229 INFO L858 garLoopResultBuilder]: For program point L887(lines 887 891) no Hoare annotation was computed. [2021-11-20 07:40:18,229 INFO L858 garLoopResultBuilder]: For program point L1015(line 1015) no Hoare annotation was computed. [2021-11-20 07:40:18,229 INFO L854 garLoopResultBuilder]: At program point L887-2(lines 883 894) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0)))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2021-11-20 07:40:18,229 INFO L854 garLoopResultBuilder]: At program point L991(line 991) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1) (and .cse2 .cse3) (and .cse3 .cse0) (not (= ~methaneLevelCritical~0 0)) (and (<= 2 ~waterLevel~0) .cse1) .cse4) (or (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse3 .cse0) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse0 .cse1) .cse4))) [2021-11-20 07:40:18,230 INFO L854 garLoopResultBuilder]: At program point L223(lines 218 226) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift_isPumpRunning_#res#1| 0))) (or (not (<= 1 ~methaneLevelCritical~0)) (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2)) (or (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-11-20 07:40:18,230 INFO L858 garLoopResultBuilder]: For program point L991-1(line 991) no Hoare annotation was computed. [2021-11-20 07:40:18,230 INFO L858 garLoopResultBuilder]: For program point L157(lines 157 165) no Hoare annotation was computed. [2021-11-20 07:40:18,230 INFO L858 garLoopResultBuilder]: For program point L153(lines 153 170) no Hoare annotation was computed. [2021-11-20 07:40:18,230 INFO L854 garLoopResultBuilder]: At program point L1016(lines 1011 1018) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-11-20 07:40:18,230 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 65 88) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2021-11-20 07:40:18,230 INFO L858 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2021-11-20 07:40:18,230 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 88) no Hoare annotation was computed. [2021-11-20 07:40:18,231 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1015) no Hoare annotation was computed. [2021-11-20 07:40:18,231 INFO L858 garLoopResultBuilder]: For program point L997(lines 997 1003) no Hoare annotation was computed. [2021-11-20 07:40:18,231 INFO L854 garLoopResultBuilder]: At program point L163(line 163) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-11-20 07:40:18,231 INFO L858 garLoopResultBuilder]: For program point L353(lines 353 366) no Hoare annotation was computed. [2021-11-20 07:40:18,231 INFO L854 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2021-11-20 07:40:18,231 INFO L861 garLoopResultBuilder]: At program point L374(lines 313 378) the Hoare annotation is: true [2021-11-20 07:40:18,231 INFO L861 garLoopResultBuilder]: At program point L853(lines 846 855) the Hoare annotation is: true [2021-11-20 07:40:18,231 INFO L858 garLoopResultBuilder]: For program point L333(lines 333 339) no Hoare annotation was computed. [2021-11-20 07:40:18,231 INFO L858 garLoopResultBuilder]: For program point L333-1(lines 333 339) no Hoare annotation was computed. [2021-11-20 07:40:18,232 INFO L858 garLoopResultBuilder]: For program point L325(lines 325 329) no Hoare annotation was computed. [2021-11-20 07:40:18,236 INFO L858 garLoopResultBuilder]: For program point L866(lines 866 873) no Hoare annotation was computed. [2021-11-20 07:40:18,238 INFO L858 garLoopResultBuilder]: For program point L866-2(lines 866 873) no Hoare annotation was computed. [2021-11-20 07:40:18,238 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 07:40:18,238 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 07:40:18,239 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 07:40:18,239 INFO L854 garLoopResultBuilder]: At program point L371(lines 322 372) the Hoare annotation is: false [2021-11-20 07:40:18,239 INFO L861 garLoopResultBuilder]: At program point L875(lines 856 878) the Hoare annotation is: true [2021-11-20 07:40:18,239 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 07:40:18,239 INFO L854 garLoopResultBuilder]: At program point L413(lines 408 416) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-11-20 07:40:18,239 INFO L858 garLoopResultBuilder]: For program point L343(lines 343 349) no Hoare annotation was computed. [2021-11-20 07:40:18,239 INFO L858 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2021-11-20 07:40:18,239 INFO L854 garLoopResultBuilder]: At program point L405(lines 401 407) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-11-20 07:40:18,239 INFO L854 garLoopResultBuilder]: At program point L306(lines 301 308) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3) (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3))) [2021-11-20 07:40:18,239 INFO L854 garLoopResultBuilder]: At program point L368(lines 323 370) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2021-11-20 07:40:18,240 INFO L854 garLoopResultBuilder]: At program point L335(line 335) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2021-11-20 07:40:18,240 INFO L854 garLoopResultBuilder]: At program point L843(lines 839 845) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2021-11-20 07:40:18,240 INFO L854 garLoopResultBuilder]: At program point L398(lines 394 400) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-11-20 07:40:18,240 INFO L858 garLoopResultBuilder]: For program point L361(lines 361 365) no Hoare annotation was computed. [2021-11-20 07:40:18,240 INFO L854 garLoopResultBuilder]: At program point L361-2(lines 353 366) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3) (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3))) [2021-11-20 07:40:18,240 INFO L858 garLoopResultBuilder]: For program point L324(lines 323 370) no Hoare annotation was computed. [2021-11-20 07:40:18,240 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 97 121) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-11-20 07:40:18,241 INFO L854 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-11-20 07:40:18,241 INFO L858 garLoopResultBuilder]: For program point L116-1(lines 97 121) no Hoare annotation was computed. [2021-11-20 07:40:18,241 INFO L854 garLoopResultBuilder]: At program point L969(lines 960 973) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse5 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse2 (and .cse5 (<= 2 ~waterLevel~0))) (.cse0 (= |old(~pumpRunning~0)| 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or (not .cse0) .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or .cse1 .cse4 .cse2 .cse3) (or .cse0 .cse4 .cse3)))) [2021-11-20 07:40:18,241 INFO L858 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2021-11-20 07:40:18,241 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 97 121) no Hoare annotation was computed. [2021-11-20 07:40:18,241 INFO L854 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse1) .cse2))) [2021-11-20 07:40:18,241 INFO L854 garLoopResultBuilder]: At program point L189-2(lines 182 198) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= |old(~pumpRunning~0)| 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (or (not .cse0) (not (<= 1 ~methaneLevelCritical~0)) .cse2 (and (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~pumpRunning~0 0) .cse3)))) [2021-11-20 07:40:18,241 INFO L858 garLoopResultBuilder]: For program point L187-1(line 187) no Hoare annotation was computed. [2021-11-20 07:40:18,241 INFO L854 garLoopResultBuilder]: At program point L278(lines 263 281) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse4 (and .cse0 .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not .cse3)))) (and (or (and .cse0 .cse1 .cse2) (not (= ~methaneLevelCritical~0 0)) .cse3 .cse4) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2) .cse3 .cse4)))) [2021-11-20 07:40:18,242 INFO L854 garLoopResultBuilder]: At program point L179(lines 174 181) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not .cse0) (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse2 .cse1) (or (<= 2 ~waterLevel~0) .cse2 .cse1))) [2021-11-20 07:40:18,242 INFO L858 garLoopResultBuilder]: For program point L272(lines 272 276) no Hoare annotation was computed. [2021-11-20 07:40:18,242 INFO L854 garLoopResultBuilder]: At program point L111(line 111) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (not .cse0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1)))) [2021-11-20 07:40:18,242 INFO L858 garLoopResultBuilder]: For program point L272-2(lines 272 276) no Hoare annotation was computed. [2021-11-20 07:40:18,242 INFO L858 garLoopResultBuilder]: For program point L105(lines 105 113) no Hoare annotation was computed. [2021-11-20 07:40:18,242 INFO L858 garLoopResultBuilder]: For program point L101(lines 101 118) no Hoare annotation was computed. [2021-11-20 07:40:18,242 INFO L858 garLoopResultBuilder]: For program point L964(lines 964 970) no Hoare annotation was computed. [2021-11-20 07:40:18,242 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 895 906) no Hoare annotation was computed. [2021-11-20 07:40:18,242 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 895 906) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2021-11-20 07:40:18,242 INFO L858 garLoopResultBuilder]: For program point L899-1(lines 895 906) no Hoare annotation was computed. [2021-11-20 07:40:18,242 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 207 217) the Hoare annotation is: true [2021-11-20 07:40:18,242 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 207 217) no Hoare annotation was computed. [2021-11-20 07:40:18,242 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 207 217) no Hoare annotation was computed. [2021-11-20 07:40:18,243 INFO L861 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: true [2021-11-20 07:40:18,243 INFO L858 garLoopResultBuilder]: For program point L212-1(line 212) no Hoare annotation was computed. [2021-11-20 07:40:18,246 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:40:18,247 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 07:40:18,276 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 07:40:18 BoogieIcfgContainer [2021-11-20 07:40:18,276 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 07:40:18,277 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 07:40:18,277 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 07:40:18,277 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 07:40:18,278 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:40:08" (3/4) ... [2021-11-20 07:40:18,281 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 07:40:18,288 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-20 07:40:18,288 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 07:40:18,288 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 07:40:18,289 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 07:40:18,289 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-11-20 07:40:18,289 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 07:40:18,289 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 07:40:18,289 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 07:40:18,289 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-11-20 07:40:18,289 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-11-20 07:40:18,308 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-11-20 07:40:18,310 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 07:40:18,311 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 07:40:18,312 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 07:40:18,312 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 07:40:18,313 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 07:40:18,314 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 07:40:18,346 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-11-20 07:40:18,347 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2021-11-20 07:40:18,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2021-11-20 07:40:18,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || 0 == systemActive) [2021-11-20 07:40:18,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || (!(\old(pumpRunning) == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) [2021-11-20 07:40:18,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == 0) && !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(1 <= methaneLevelCritical)) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(0 == systemActive))) || 0 == systemActive) [2021-11-20 07:40:18,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((methaneLevelCritical == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((1 <= methaneLevelCritical && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2021-11-20 07:40:18,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2021-11-20 07:40:18,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((methaneLevelCritical == tmp && pumpRunning == 0) && 2 <= waterLevel)) [2021-11-20 07:40:18,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-11-20 07:40:18,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-11-20 07:40:18,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((pumpRunning == 0 && !(\result == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive)) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-11-20 07:40:18,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-11-20 07:40:18,359 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && tmp___0 == 0) && !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && tmp___0 == 0) && !(0 == systemActive))) [2021-11-20 07:40:18,420 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 07:40:18,420 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 07:40:18,421 INFO L158 Benchmark]: Toolchain (without parser) took 10934.22ms. Allocated memory was 121.6MB in the beginning and 176.2MB in the end (delta: 54.5MB). Free memory was 85.3MB in the beginning and 91.0MB in the end (delta: -5.7MB). Peak memory consumption was 48.8MB. Max. memory is 16.1GB. [2021-11-20 07:40:18,421 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 121.6MB. Free memory was 102.5MB in the beginning and 102.4MB in the end (delta: 70.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 07:40:18,422 INFO L158 Benchmark]: CACSL2BoogieTranslator took 590.77ms. Allocated memory is still 121.6MB. Free memory was 85.0MB in the beginning and 88.6MB in the end (delta: -3.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-20 07:40:18,422 INFO L158 Benchmark]: Boogie Procedure Inliner took 72.58ms. Allocated memory is still 121.6MB. Free memory was 88.2MB in the beginning and 85.9MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 07:40:18,422 INFO L158 Benchmark]: Boogie Preprocessor took 32.21ms. Allocated memory is still 121.6MB. Free memory was 85.9MB in the beginning and 84.0MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 07:40:18,423 INFO L158 Benchmark]: RCFGBuilder took 605.92ms. Allocated memory is still 121.6MB. Free memory was 84.0MB in the beginning and 66.7MB in the end (delta: 17.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-20 07:40:18,423 INFO L158 Benchmark]: TraceAbstraction took 9470.78ms. Allocated memory was 121.6MB in the beginning and 176.2MB in the end (delta: 54.5MB). Free memory was 66.3MB in the beginning and 98.3MB in the end (delta: -32.0MB). Peak memory consumption was 59.7MB. Max. memory is 16.1GB. [2021-11-20 07:40:18,424 INFO L158 Benchmark]: Witness Printer took 143.00ms. Allocated memory is still 176.2MB. Free memory was 98.3MB in the beginning and 91.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-20 07:40:18,426 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 121.6MB. Free memory was 102.5MB in the beginning and 102.4MB in the end (delta: 70.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 590.77ms. Allocated memory is still 121.6MB. Free memory was 85.0MB in the beginning and 88.6MB in the end (delta: -3.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 72.58ms. Allocated memory is still 121.6MB. Free memory was 88.2MB in the beginning and 85.9MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 32.21ms. Allocated memory is still 121.6MB. Free memory was 85.9MB in the beginning and 84.0MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 605.92ms. Allocated memory is still 121.6MB. Free memory was 84.0MB in the beginning and 66.7MB in the end (delta: 17.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 9470.78ms. Allocated memory was 121.6MB in the beginning and 176.2MB in the end (delta: 54.5MB). Free memory was 66.3MB in the beginning and 98.3MB in the end (delta: -32.0MB). Peak memory consumption was 59.7MB. Max. memory is 16.1GB. * Witness Printer took 143.00ms. Allocated memory is still 176.2MB. Free memory was 98.3MB in the beginning and 91.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1015]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 109 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.4s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1406 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1364 mSDsluCounter, 4271 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2973 mSDsCounter, 452 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1789 IncrementalHoareTripleChecker+Invalid, 2241 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 452 mSolverCounterUnsat, 1298 mSDtfsCounter, 1789 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 338 GetRequests, 240 SyntacticMatches, 1 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 323 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=612occurred in iteration=9, InterpolantAutomatonStates: 87, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 65 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 1250 PreInvPairs, 1535 NumberOfFragments, 1417 HoareAnnotationTreeSize, 1250 FomulaSimplifications, 2946 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 50 FomulaSimplificationsInter, 10983 FormulaSimplificationTreeSizeReductionInter, 3.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 660 NumberOfCodeBlocks, 660 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 649 ConstructedInterpolants, 0 QuantifiedInterpolants, 1115 SizeOfPredicates, 3 NumberOfNonLiveVariables, 527 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 107/110 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 149]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || (!(\old(pumpRunning) == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && tmp___0 == 0) && !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && tmp___0 == 0) && !(0 == systemActive))) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 795]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: (((((((tmp == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp == 0) && !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(1 <= methaneLevelCritical)) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(0 == systemActive))) || 0 == systemActive) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: ((((methaneLevelCritical == 0 && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((1 <= methaneLevelCritical && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((pumpRunning == 0 && !(\result == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive)) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: (((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((methaneLevelCritical == tmp && pumpRunning == 0) && 2 <= waterLevel)) - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 401]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1011]: Loop Invariant Derived loop invariant: (!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 394]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 974]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || 0 == systemActive) - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((\old(pumpRunning) == 0 || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 313]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-11-20 07:40:18,505 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0d9d8c53-668b-4836-8577-65bb2e9b9c2d/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE