./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ae631a30e0cfb00652c35b082fd4038988aa5f3b2e1b026ceeb94d0624c45642 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 06:15:13,257 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 06:15:13,261 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 06:15:13,322 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 06:15:13,323 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 06:15:13,327 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 06:15:13,329 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 06:15:13,333 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 06:15:13,336 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 06:15:13,341 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 06:15:13,342 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 06:15:13,344 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 06:15:13,345 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 06:15:13,347 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 06:15:13,349 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 06:15:13,357 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 06:15:13,359 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 06:15:13,360 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 06:15:13,362 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 06:15:13,369 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 06:15:13,371 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 06:15:13,373 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 06:15:13,376 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 06:15:13,377 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 06:15:13,387 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 06:15:13,387 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 06:15:13,388 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 06:15:13,390 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 06:15:13,391 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 06:15:13,392 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 06:15:13,393 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 06:15:13,394 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 06:15:13,396 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 06:15:13,397 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 06:15:13,399 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 06:15:13,399 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 06:15:13,400 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 06:15:13,400 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 06:15:13,401 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 06:15:13,402 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 06:15:13,403 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 06:15:13,403 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 06:15:13,453 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 06:15:13,453 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 06:15:13,454 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 06:15:13,454 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 06:15:13,461 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 06:15:13,461 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 06:15:13,463 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 06:15:13,463 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 06:15:13,463 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 06:15:13,463 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 06:15:13,464 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 06:15:13,465 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 06:15:13,465 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 06:15:13,465 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 06:15:13,466 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 06:15:13,466 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 06:15:13,466 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 06:15:13,466 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 06:15:13,466 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 06:15:13,467 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 06:15:13,467 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 06:15:13,467 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 06:15:13,467 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 06:15:13,468 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 06:15:13,468 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:15:13,468 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 06:15:13,468 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 06:15:13,469 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 06:15:13,469 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 06:15:13,470 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 06:15:13,471 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 06:15:13,471 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 06:15:13,471 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 06:15:13,472 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 06:15:13,472 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ae631a30e0cfb00652c35b082fd4038988aa5f3b2e1b026ceeb94d0624c45642 [2021-11-20 06:15:13,781 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 06:15:13,802 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 06:15:13,804 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 06:15:13,806 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 06:15:13,806 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 06:15:13,808 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c [2021-11-20 06:15:13,871 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/data/3cbfaa88c/b794b7ca592a40a4b6dbabfc9863ff5f/FLAGce371ac71 [2021-11-20 06:15:14,457 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 06:15:14,467 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c [2021-11-20 06:15:14,486 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/data/3cbfaa88c/b794b7ca592a40a4b6dbabfc9863ff5f/FLAGce371ac71 [2021-11-20 06:15:14,711 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/data/3cbfaa88c/b794b7ca592a40a4b6dbabfc9863ff5f [2021-11-20 06:15:14,713 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 06:15:14,715 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 06:15:14,718 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 06:15:14,718 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 06:15:14,721 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 06:15:14,721 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:15:14" (1/1) ... [2021-11-20 06:15:14,722 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@26113bcd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:14, skipping insertion in model container [2021-11-20 06:15:14,723 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:15:14" (1/1) ... [2021-11-20 06:15:14,731 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 06:15:14,774 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:15:15,054 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c[13037,13050] [2021-11-20 06:15:15,118 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:15:15,129 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 06:15:15,244 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c[13037,13050] [2021-11-20 06:15:15,274 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:15:15,314 INFO L208 MainTranslator]: Completed translation [2021-11-20 06:15:15,314 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15 WrapperNode [2021-11-20 06:15:15,315 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 06:15:15,316 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 06:15:15,317 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 06:15:15,317 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 06:15:15,326 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,363 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,403 INFO L137 Inliner]: procedures = 57, calls = 158, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 283 [2021-11-20 06:15:15,404 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 06:15:15,404 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 06:15:15,404 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 06:15:15,405 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 06:15:15,414 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,415 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,418 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,418 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,427 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,434 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,436 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,440 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 06:15:15,441 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 06:15:15,441 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 06:15:15,441 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 06:15:15,442 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (1/1) ... [2021-11-20 06:15:15,451 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:15:15,465 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:15:15,478 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 06:15:15,501 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 06:15:15,536 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 06:15:15,536 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 06:15:15,536 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 06:15:15,536 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-11-20 06:15:15,536 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-11-20 06:15:15,536 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 06:15:15,537 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 06:15:15,537 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 06:15:15,537 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 06:15:15,537 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 06:15:15,537 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 06:15:15,537 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 06:15:15,538 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 06:15:15,538 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 06:15:15,538 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 06:15:15,538 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 06:15:15,538 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 06:15:15,538 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 06:15:15,637 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 06:15:15,639 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 06:15:16,067 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 06:15:16,078 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 06:15:16,084 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 06:15:16,087 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:15:16 BoogieIcfgContainer [2021-11-20 06:15:16,087 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 06:15:16,090 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 06:15:16,090 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 06:15:16,094 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 06:15:16,094 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 06:15:14" (1/3) ... [2021-11-20 06:15:16,095 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4c93f258 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:15:16, skipping insertion in model container [2021-11-20 06:15:16,095 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:15:15" (2/3) ... [2021-11-20 06:15:16,096 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4c93f258 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:15:16, skipping insertion in model container [2021-11-20 06:15:16,096 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:15:16" (3/3) ... [2021-11-20 06:15:16,098 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product58.cil.c [2021-11-20 06:15:16,127 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 06:15:16,127 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 06:15:16,197 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 06:15:16,206 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 06:15:16,206 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 06:15:16,229 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-11-20 06:15:16,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-11-20 06:15:16,239 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:16,240 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:16,241 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:16,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:16,247 INFO L85 PathProgramCache]: Analyzing trace with hash -1031602919, now seen corresponding path program 1 times [2021-11-20 06:15:16,257 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:16,257 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901466533] [2021-11-20 06:15:16,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:16,259 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:16,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:16,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 06:15:16,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:16,633 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:16,634 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:16,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901466533] [2021-11-20 06:15:16,636 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901466533] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:16,637 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:16,637 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 06:15:16,639 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2002377925] [2021-11-20 06:15:16,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:16,646 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 06:15:16,646 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:16,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 06:15:16,690 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 06:15:16,694 INFO L87 Difference]: Start difference. First operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 06:15:16,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:16,770 INFO L93 Difference]: Finished difference Result 180 states and 245 transitions. [2021-11-20 06:15:16,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 06:15:16,773 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-11-20 06:15:16,773 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:16,796 INFO L225 Difference]: With dead ends: 180 [2021-11-20 06:15:16,796 INFO L226 Difference]: Without dead ends: 85 [2021-11-20 06:15:16,802 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 06:15:16,807 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:16,809 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:15:16,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-11-20 06:15:16,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-11-20 06:15:16,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 73 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-11-20 06:15:16,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2021-11-20 06:15:16,894 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2021-11-20 06:15:16,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:16,895 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2021-11-20 06:15:16,896 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 06:15:16,897 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2021-11-20 06:15:16,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-11-20 06:15:16,902 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:16,903 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:16,903 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 06:15:16,905 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:16,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:16,910 INFO L85 PathProgramCache]: Analyzing trace with hash -1999893422, now seen corresponding path program 1 times [2021-11-20 06:15:16,911 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:16,912 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1313586666] [2021-11-20 06:15:16,912 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:16,913 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:16,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 06:15:17,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,069 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:17,070 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:17,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1313586666] [2021-11-20 06:15:17,070 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1313586666] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:17,071 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:17,071 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 06:15:17,071 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1820569464] [2021-11-20 06:15:17,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:17,073 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:15:17,075 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:17,076 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:15:17,077 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:15:17,077 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 06:15:17,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:17,108 INFO L93 Difference]: Finished difference Result 135 states and 175 transitions. [2021-11-20 06:15:17,109 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:15:17,110 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-11-20 06:15:17,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:17,117 INFO L225 Difference]: With dead ends: 135 [2021-11-20 06:15:17,117 INFO L226 Difference]: Without dead ends: 76 [2021-11-20 06:15:17,125 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:15:17,129 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 13 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:17,130 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 177 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:15:17,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2021-11-20 06:15:17,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2021-11-20 06:15:17,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 67 states have internal predecessors, (80), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-20 06:15:17,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2021-11-20 06:15:17,157 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2021-11-20 06:15:17,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:17,159 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2021-11-20 06:15:17,159 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 06:15:17,160 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2021-11-20 06:15:17,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-11-20 06:15:17,164 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:17,164 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:17,165 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 06:15:17,165 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:17,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:17,167 INFO L85 PathProgramCache]: Analyzing trace with hash -2069285612, now seen corresponding path program 1 times [2021-11-20 06:15:17,168 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:17,168 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [843002895] [2021-11-20 06:15:17,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:17,170 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:17,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:15:17,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,290 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:17,290 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:17,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [843002895] [2021-11-20 06:15:17,291 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [843002895] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:17,291 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:17,291 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 06:15:17,292 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1562912476] [2021-11-20 06:15:17,292 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:17,293 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:15:17,293 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:17,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:15:17,294 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:15:17,294 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 06:15:17,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:17,329 INFO L93 Difference]: Finished difference Result 145 states and 190 transitions. [2021-11-20 06:15:17,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:15:17,330 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-11-20 06:15:17,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:17,332 INFO L225 Difference]: With dead ends: 145 [2021-11-20 06:15:17,332 INFO L226 Difference]: Without dead ends: 76 [2021-11-20 06:15:17,333 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:15:17,335 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 92 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:17,335 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [92 Valid, 96 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:15:17,337 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2021-11-20 06:15:17,353 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2021-11-20 06:15:17,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-20 06:15:17,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2021-11-20 06:15:17,355 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 31 [2021-11-20 06:15:17,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:17,355 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2021-11-20 06:15:17,356 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 06:15:17,356 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2021-11-20 06:15:17,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-11-20 06:15:17,371 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:17,371 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:17,371 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 06:15:17,372 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:17,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:17,373 INFO L85 PathProgramCache]: Analyzing trace with hash -513760969, now seen corresponding path program 1 times [2021-11-20 06:15:17,374 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:17,374 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2045786189] [2021-11-20 06:15:17,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:17,375 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:17,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:15:17,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:15:17,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 06:15:17,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,554 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:17,555 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:17,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2045786189] [2021-11-20 06:15:17,555 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2045786189] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:17,555 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:17,555 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 06:15:17,556 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [465580370] [2021-11-20 06:15:17,556 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:17,557 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:15:17,557 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:17,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:15:17,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:15:17,558 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-20 06:15:17,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:17,736 INFO L93 Difference]: Finished difference Result 224 states and 286 transitions. [2021-11-20 06:15:17,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:15:17,737 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2021-11-20 06:15:17,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:17,739 INFO L225 Difference]: With dead ends: 224 [2021-11-20 06:15:17,739 INFO L226 Difference]: Without dead ends: 155 [2021-11-20 06:15:17,740 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:15:17,741 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 185 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:17,742 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [187 Valid, 317 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:15:17,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2021-11-20 06:15:17,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 149. [2021-11-20 06:15:17,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 125 states have internal predecessors, (149), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2021-11-20 06:15:17,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 184 transitions. [2021-11-20 06:15:17,764 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 184 transitions. Word has length 41 [2021-11-20 06:15:17,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:17,765 INFO L470 AbstractCegarLoop]: Abstraction has 149 states and 184 transitions. [2021-11-20 06:15:17,765 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-20 06:15:17,765 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 184 transitions. [2021-11-20 06:15:17,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-20 06:15:17,766 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:17,767 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:17,767 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 06:15:17,767 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:17,767 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:17,767 INFO L85 PathProgramCache]: Analyzing trace with hash 1561264077, now seen corresponding path program 1 times [2021-11-20 06:15:17,768 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:17,768 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [815686064] [2021-11-20 06:15:17,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:17,768 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:17,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:15:17,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:15:17,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-11-20 06:15:17,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:17,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:17,839 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:17,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [815686064] [2021-11-20 06:15:17,839 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [815686064] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:17,839 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:17,839 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:15:17,840 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1155411790] [2021-11-20 06:15:17,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:17,840 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:15:17,841 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:17,841 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:15:17,841 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:15:17,841 INFO L87 Difference]: Start difference. First operand 149 states and 184 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 06:15:18,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:18,008 INFO L93 Difference]: Finished difference Result 310 states and 390 transitions. [2021-11-20 06:15:18,008 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:15:18,009 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-11-20 06:15:18,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:18,015 INFO L225 Difference]: With dead ends: 310 [2021-11-20 06:15:18,015 INFO L226 Difference]: Without dead ends: 168 [2021-11-20 06:15:18,016 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2021-11-20 06:15:18,021 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 181 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 184 SdHoareTripleChecker+Valid, 312 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:18,021 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [184 Valid, 312 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:15:18,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2021-11-20 06:15:18,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 151. [2021-11-20 06:15:18,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 119 states have (on average 1.26890756302521) internal successors, (151), 127 states have internal predecessors, (151), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2021-11-20 06:15:18,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 186 transitions. [2021-11-20 06:15:18,060 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 186 transitions. Word has length 47 [2021-11-20 06:15:18,060 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:18,060 INFO L470 AbstractCegarLoop]: Abstraction has 151 states and 186 transitions. [2021-11-20 06:15:18,061 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 06:15:18,061 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 186 transitions. [2021-11-20 06:15:18,066 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-20 06:15:18,067 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:18,068 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:18,068 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 06:15:18,068 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:18,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:18,069 INFO L85 PathProgramCache]: Analyzing trace with hash 1342409359, now seen corresponding path program 1 times [2021-11-20 06:15:18,069 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:18,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [827439967] [2021-11-20 06:15:18,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:18,070 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:18,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:18,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:15:18,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:18,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:15:18,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:18,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-11-20 06:15:18,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:18,195 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:18,196 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:18,196 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [827439967] [2021-11-20 06:15:18,196 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [827439967] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:18,196 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:18,196 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:15:18,197 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [761915952] [2021-11-20 06:15:18,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:18,197 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:15:18,198 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:18,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:15:18,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:15:18,199 INFO L87 Difference]: Start difference. First operand 151 states and 186 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 06:15:18,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:18,418 INFO L93 Difference]: Finished difference Result 391 states and 500 transitions. [2021-11-20 06:15:18,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 06:15:18,419 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-11-20 06:15:18,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:18,427 INFO L225 Difference]: With dead ends: 391 [2021-11-20 06:15:18,428 INFO L226 Difference]: Without dead ends: 247 [2021-11-20 06:15:18,429 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-11-20 06:15:18,432 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 127 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 412 SdHoareTripleChecker+Invalid, 175 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:18,435 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [132 Valid, 412 Invalid, 175 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:15:18,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 247 states. [2021-11-20 06:15:18,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 247 to 239. [2021-11-20 06:15:18,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 239 states, 187 states have (on average 1.2513368983957218) internal successors, (234), 198 states have internal predecessors, (234), 26 states have call successors, (26), 23 states have call predecessors, (26), 25 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2021-11-20 06:15:18,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 239 states to 239 states and 296 transitions. [2021-11-20 06:15:18,482 INFO L78 Accepts]: Start accepts. Automaton has 239 states and 296 transitions. Word has length 47 [2021-11-20 06:15:18,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:18,483 INFO L470 AbstractCegarLoop]: Abstraction has 239 states and 296 transitions. [2021-11-20 06:15:18,483 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 06:15:18,483 INFO L276 IsEmpty]: Start isEmpty. Operand 239 states and 296 transitions. [2021-11-20 06:15:18,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-20 06:15:18,485 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:18,485 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:18,486 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 06:15:18,486 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:18,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:18,486 INFO L85 PathProgramCache]: Analyzing trace with hash 2094412649, now seen corresponding path program 1 times [2021-11-20 06:15:18,487 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:18,487 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1116857853] [2021-11-20 06:15:18,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:18,487 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:18,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:18,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:15:18,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:18,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:15:18,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:18,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:15:18,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:18,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-11-20 06:15:18,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:18,602 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:18,602 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:18,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1116857853] [2021-11-20 06:15:18,603 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1116857853] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:18,603 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:18,603 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:15:18,603 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134280695] [2021-11-20 06:15:18,603 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:18,604 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:15:18,604 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:18,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:15:18,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:15:18,605 INFO L87 Difference]: Start difference. First operand 239 states and 296 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:19,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:19,003 INFO L93 Difference]: Finished difference Result 573 states and 742 transitions. [2021-11-20 06:15:19,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-20 06:15:19,004 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2021-11-20 06:15:19,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:19,008 INFO L225 Difference]: With dead ends: 573 [2021-11-20 06:15:19,008 INFO L226 Difference]: Without dead ends: 429 [2021-11-20 06:15:19,009 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2021-11-20 06:15:19,010 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 299 mSDsluCounter, 322 mSDsCounter, 0 mSdLazyCounter, 300 mSolverCounterSat, 94 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 302 SdHoareTripleChecker+Valid, 439 SdHoareTripleChecker+Invalid, 394 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 94 IncrementalHoareTripleChecker+Valid, 300 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:19,010 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [302 Valid, 439 Invalid, 394 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [94 Valid, 300 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 06:15:19,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 429 states. [2021-11-20 06:15:19,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 429 to 395. [2021-11-20 06:15:19,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 395 states, 309 states have (on average 1.2297734627831716) internal successors, (380), 329 states have internal predecessors, (380), 42 states have call successors, (42), 34 states have call predecessors, (42), 43 states have return successors, (69), 43 states have call predecessors, (69), 42 states have call successors, (69) [2021-11-20 06:15:19,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 395 states to 395 states and 491 transitions. [2021-11-20 06:15:19,044 INFO L78 Accepts]: Start accepts. Automaton has 395 states and 491 transitions. Word has length 51 [2021-11-20 06:15:19,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:19,044 INFO L470 AbstractCegarLoop]: Abstraction has 395 states and 491 transitions. [2021-11-20 06:15:19,044 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:19,045 INFO L276 IsEmpty]: Start isEmpty. Operand 395 states and 491 transitions. [2021-11-20 06:15:19,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-20 06:15:19,046 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:19,046 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:19,046 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 06:15:19,047 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:19,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:19,047 INFO L85 PathProgramCache]: Analyzing trace with hash -2115713435, now seen corresponding path program 1 times [2021-11-20 06:15:19,047 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:19,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [390897349] [2021-11-20 06:15:19,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:19,048 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:19,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:15:19,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:15:19,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:15:19,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-11-20 06:15:19,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,138 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:19,138 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:19,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [390897349] [2021-11-20 06:15:19,139 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [390897349] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:19,139 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:19,139 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 06:15:19,139 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2009329127] [2021-11-20 06:15:19,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:19,140 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:15:19,140 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:19,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:15:19,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:15:19,141 INFO L87 Difference]: Start difference. First operand 395 states and 491 transitions. Second operand has 8 states, 8 states have (on average 5.25) internal successors, (42), 6 states have internal predecessors, (42), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:19,433 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:19,433 INFO L93 Difference]: Finished difference Result 719 states and 894 transitions. [2021-11-20 06:15:19,433 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-20 06:15:19,434 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 6 states have internal predecessors, (42), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2021-11-20 06:15:19,434 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:19,437 INFO L225 Difference]: With dead ends: 719 [2021-11-20 06:15:19,437 INFO L226 Difference]: Without dead ends: 415 [2021-11-20 06:15:19,439 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=70, Invalid=140, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:15:19,439 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 256 mSDsluCounter, 353 mSDsCounter, 0 mSdLazyCounter, 222 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 474 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 222 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:19,440 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [261 Valid, 474 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 222 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 06:15:19,441 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 415 states. [2021-11-20 06:15:19,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 415 to 398. [2021-11-20 06:15:19,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 398 states, 312 states have (on average 1.2275641025641026) internal successors, (383), 332 states have internal predecessors, (383), 42 states have call successors, (42), 34 states have call predecessors, (42), 43 states have return successors, (69), 43 states have call predecessors, (69), 42 states have call successors, (69) [2021-11-20 06:15:19,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 398 states to 398 states and 494 transitions. [2021-11-20 06:15:19,470 INFO L78 Accepts]: Start accepts. Automaton has 398 states and 494 transitions. Word has length 51 [2021-11-20 06:15:19,470 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:19,470 INFO L470 AbstractCegarLoop]: Abstraction has 398 states and 494 transitions. [2021-11-20 06:15:19,471 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 6 states have internal predecessors, (42), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:19,471 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 494 transitions. [2021-11-20 06:15:19,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-20 06:15:19,472 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:19,472 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:19,472 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 06:15:19,473 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:19,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:19,473 INFO L85 PathProgramCache]: Analyzing trace with hash 1960399143, now seen corresponding path program 1 times [2021-11-20 06:15:19,473 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:19,473 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [33317030] [2021-11-20 06:15:19,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:19,474 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:19,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:15:19,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:15:19,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:15:19,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-11-20 06:15:19,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,530 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:19,531 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:19,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [33317030] [2021-11-20 06:15:19,531 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [33317030] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:19,531 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:19,531 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:15:19,532 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1865125713] [2021-11-20 06:15:19,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:19,532 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:15:19,532 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:19,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:15:19,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:15:19,533 INFO L87 Difference]: Start difference. First operand 398 states and 494 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:19,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:19,744 INFO L93 Difference]: Finished difference Result 705 states and 879 transitions. [2021-11-20 06:15:19,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 06:15:19,745 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2021-11-20 06:15:19,745 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:19,748 INFO L225 Difference]: With dead ends: 705 [2021-11-20 06:15:19,748 INFO L226 Difference]: Without dead ends: 398 [2021-11-20 06:15:19,750 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2021-11-20 06:15:19,751 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 142 mSDsluCounter, 265 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 389 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:19,751 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [144 Valid, 389 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:15:19,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398 states. [2021-11-20 06:15:19,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398 to 392. [2021-11-20 06:15:19,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 392 states, 308 states have (on average 1.224025974025974) internal successors, (377), 327 states have internal predecessors, (377), 41 states have call successors, (41), 33 states have call predecessors, (41), 42 states have return successors, (68), 42 states have call predecessors, (68), 41 states have call successors, (68) [2021-11-20 06:15:19,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 392 states to 392 states and 486 transitions. [2021-11-20 06:15:19,783 INFO L78 Accepts]: Start accepts. Automaton has 392 states and 486 transitions. Word has length 51 [2021-11-20 06:15:19,784 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:19,784 INFO L470 AbstractCegarLoop]: Abstraction has 392 states and 486 transitions. [2021-11-20 06:15:19,784 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:19,784 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 486 transitions. [2021-11-20 06:15:19,786 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-20 06:15:19,786 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:19,786 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:19,786 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 06:15:19,787 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:19,787 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:19,787 INFO L85 PathProgramCache]: Analyzing trace with hash -1800767755, now seen corresponding path program 1 times [2021-11-20 06:15:19,787 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:19,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [179130739] [2021-11-20 06:15:19,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:19,788 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:19,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:15:19,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:15:19,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:15:19,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 06:15:19,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:19,939 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-20 06:15:19,940 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:19,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [179130739] [2021-11-20 06:15:19,940 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [179130739] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:15:19,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2129745371] [2021-11-20 06:15:19,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:19,941 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:15:19,941 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:15:19,943 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:15:19,954 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 06:15:20,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:20,074 INFO L263 TraceCheckSpWp]: Trace formula consists of 376 conjuncts, 15 conjunts are in the unsatisfiable core [2021-11-20 06:15:20,081 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:15:20,338 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:15:20,338 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 06:15:20,339 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2129745371] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:20,339 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:15:20,339 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2021-11-20 06:15:20,339 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1312522669] [2021-11-20 06:15:20,339 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:20,340 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:15:20,340 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:20,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:15:20,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=147, Unknown=0, NotChecked=0, Total=182 [2021-11-20 06:15:20,341 INFO L87 Difference]: Start difference. First operand 392 states and 486 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:20,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:20,500 INFO L93 Difference]: Finished difference Result 1145 states and 1446 transitions. [2021-11-20 06:15:20,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:15:20,501 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-11-20 06:15:20,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:20,507 INFO L225 Difference]: With dead ends: 1145 [2021-11-20 06:15:20,507 INFO L226 Difference]: Without dead ends: 760 [2021-11-20 06:15:20,509 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=168, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:15:20,510 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 66 mSDsluCounter, 366 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 470 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:20,510 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [68 Valid, 470 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:15:20,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 760 states. [2021-11-20 06:15:20,574 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 760 to 758. [2021-11-20 06:15:20,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 758 states, 594 states have (on average 1.2121212121212122) internal successors, (720), 628 states have internal predecessors, (720), 81 states have call successors, (81), 66 states have call predecessors, (81), 82 states have return successors, (138), 82 states have call predecessors, (138), 81 states have call successors, (138) [2021-11-20 06:15:20,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 758 states to 758 states and 939 transitions. [2021-11-20 06:15:20,582 INFO L78 Accepts]: Start accepts. Automaton has 758 states and 939 transitions. Word has length 56 [2021-11-20 06:15:20,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:20,582 INFO L470 AbstractCegarLoop]: Abstraction has 758 states and 939 transitions. [2021-11-20 06:15:20,582 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:20,582 INFO L276 IsEmpty]: Start isEmpty. Operand 758 states and 939 transitions. [2021-11-20 06:15:20,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-11-20 06:15:20,584 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:20,584 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:20,622 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 06:15:20,800 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-20 06:15:20,800 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:20,801 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:20,801 INFO L85 PathProgramCache]: Analyzing trace with hash 804933449, now seen corresponding path program 1 times [2021-11-20 06:15:20,801 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:20,801 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773022231] [2021-11-20 06:15:20,801 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:20,801 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:20,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:20,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:15:20,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:20,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:15:20,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:20,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:15:20,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:20,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-11-20 06:15:20,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:20,908 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 06:15:20,908 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:20,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773022231] [2021-11-20 06:15:20,909 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773022231] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:20,909 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:20,909 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:15:20,909 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [996353866] [2021-11-20 06:15:20,910 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:20,910 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:15:20,910 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:20,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:15:20,911 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:15:20,912 INFO L87 Difference]: Start difference. First operand 758 states and 939 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:21,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:21,289 INFO L93 Difference]: Finished difference Result 1523 states and 1884 transitions. [2021-11-20 06:15:21,290 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 06:15:21,290 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-11-20 06:15:21,290 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:21,296 INFO L225 Difference]: With dead ends: 1523 [2021-11-20 06:15:21,296 INFO L226 Difference]: Without dead ends: 772 [2021-11-20 06:15:21,298 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:15:21,299 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 215 mSDsluCounter, 381 mSDsCounter, 0 mSdLazyCounter, 296 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 537 SdHoareTripleChecker+Invalid, 348 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 296 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:21,299 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [218 Valid, 537 Invalid, 348 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 296 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 06:15:21,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 772 states. [2021-11-20 06:15:21,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 772 to 758. [2021-11-20 06:15:21,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 758 states, 594 states have (on average 1.1952861952861953) internal successors, (710), 628 states have internal predecessors, (710), 81 states have call successors, (81), 66 states have call predecessors, (81), 82 states have return successors, (123), 82 states have call predecessors, (123), 81 states have call successors, (123) [2021-11-20 06:15:21,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 758 states to 758 states and 914 transitions. [2021-11-20 06:15:21,355 INFO L78 Accepts]: Start accepts. Automaton has 758 states and 914 transitions. Word has length 57 [2021-11-20 06:15:21,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:21,355 INFO L470 AbstractCegarLoop]: Abstraction has 758 states and 914 transitions. [2021-11-20 06:15:21,355 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 06:15:21,355 INFO L276 IsEmpty]: Start isEmpty. Operand 758 states and 914 transitions. [2021-11-20 06:15:21,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-20 06:15:21,357 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:21,358 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:21,358 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-20 06:15:21,358 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:21,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:21,358 INFO L85 PathProgramCache]: Analyzing trace with hash 1321374617, now seen corresponding path program 1 times [2021-11-20 06:15:21,359 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:21,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1233418603] [2021-11-20 06:15:21,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:21,359 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:21,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:21,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:15:21,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:21,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-11-20 06:15:21,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:21,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-20 06:15:21,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:21,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:15:21,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:21,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-11-20 06:15:21,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:21,470 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-20 06:15:21,470 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:21,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1233418603] [2021-11-20 06:15:21,471 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1233418603] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:15:21,471 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:15:21,471 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-11-20 06:15:21,471 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511666026] [2021-11-20 06:15:21,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:15:21,472 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-11-20 06:15:21,472 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:21,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-11-20 06:15:21,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=90, Unknown=0, NotChecked=0, Total=110 [2021-11-20 06:15:21,473 INFO L87 Difference]: Start difference. First operand 758 states and 914 transitions. Second operand has 11 states, 11 states have (on average 4.454545454545454) internal successors, (49), 7 states have internal predecessors, (49), 3 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 06:15:22,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:22,932 INFO L93 Difference]: Finished difference Result 1843 states and 2279 transitions. [2021-11-20 06:15:22,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-11-20 06:15:22,933 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.454545454545454) internal successors, (49), 7 states have internal predecessors, (49), 3 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2021-11-20 06:15:22,934 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:22,941 INFO L225 Difference]: With dead ends: 1843 [2021-11-20 06:15:22,942 INFO L226 Difference]: Without dead ends: 1092 [2021-11-20 06:15:22,947 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 621 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=491, Invalid=1765, Unknown=0, NotChecked=0, Total=2256 [2021-11-20 06:15:22,948 INFO L933 BasicCegarLoop]: 179 mSDtfsCounter, 415 mSDsluCounter, 387 mSDsCounter, 0 mSdLazyCounter, 1227 mSolverCounterSat, 213 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 420 SdHoareTripleChecker+Valid, 566 SdHoareTripleChecker+Invalid, 1440 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 213 IncrementalHoareTripleChecker+Valid, 1227 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:22,948 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [420 Valid, 566 Invalid, 1440 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [213 Valid, 1227 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-11-20 06:15:22,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1092 states. [2021-11-20 06:15:23,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1092 to 726. [2021-11-20 06:15:23,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 726 states, 562 states have (on average 1.1637010676156583) internal successors, (654), 596 states have internal predecessors, (654), 81 states have call successors, (81), 66 states have call predecessors, (81), 82 states have return successors, (117), 82 states have call predecessors, (117), 81 states have call successors, (117) [2021-11-20 06:15:23,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 726 states to 726 states and 852 transitions. [2021-11-20 06:15:23,021 INFO L78 Accepts]: Start accepts. Automaton has 726 states and 852 transitions. Word has length 60 [2021-11-20 06:15:23,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:23,021 INFO L470 AbstractCegarLoop]: Abstraction has 726 states and 852 transitions. [2021-11-20 06:15:23,022 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.454545454545454) internal successors, (49), 7 states have internal predecessors, (49), 3 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 06:15:23,022 INFO L276 IsEmpty]: Start isEmpty. Operand 726 states and 852 transitions. [2021-11-20 06:15:23,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-11-20 06:15:23,028 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:15:23,028 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:23,028 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-11-20 06:15:23,028 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:15:23,030 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:15:23,030 INFO L85 PathProgramCache]: Analyzing trace with hash 981971162, now seen corresponding path program 1 times [2021-11-20 06:15:23,030 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:15:23,030 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1499993486] [2021-11-20 06:15:23,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:23,030 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:15:23,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:23,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:15:23,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:23,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:15:23,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:23,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:15:23,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:23,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:15:23,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:23,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-20 06:15:23,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:23,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:15:23,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:23,153 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 20 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-20 06:15:23,153 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:15:23,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1499993486] [2021-11-20 06:15:23,153 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1499993486] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:15:23,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1656798590] [2021-11-20 06:15:23,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:15:23,154 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:15:23,154 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:15:23,158 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:15:23,181 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 06:15:23,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:15:23,259 INFO L263 TraceCheckSpWp]: Trace formula consists of 461 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-20 06:15:23,263 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:15:23,552 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-20 06:15:23,552 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:15:23,971 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-11-20 06:15:23,972 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1656798590] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:15:23,972 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 06:15:23,972 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 9] total 19 [2021-11-20 06:15:23,972 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1536187713] [2021-11-20 06:15:23,972 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 06:15:23,974 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2021-11-20 06:15:23,974 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:15:23,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2021-11-20 06:15:23,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=282, Unknown=0, NotChecked=0, Total=342 [2021-11-20 06:15:23,977 INFO L87 Difference]: Start difference. First operand 726 states and 852 transitions. Second operand has 19 states, 19 states have (on average 7.157894736842105) internal successors, (136), 14 states have internal predecessors, (136), 7 states have call successors, (18), 10 states have call predecessors, (18), 8 states have return successors, (16), 8 states have call predecessors, (16), 7 states have call successors, (16) [2021-11-20 06:15:25,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:15:25,596 INFO L93 Difference]: Finished difference Result 1523 states and 1847 transitions. [2021-11-20 06:15:25,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2021-11-20 06:15:25,596 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 7.157894736842105) internal successors, (136), 14 states have internal predecessors, (136), 7 states have call successors, (18), 10 states have call predecessors, (18), 8 states have return successors, (16), 8 states have call predecessors, (16), 7 states have call successors, (16) Word has length 89 [2021-11-20 06:15:25,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:15:25,597 INFO L225 Difference]: With dead ends: 1523 [2021-11-20 06:15:25,598 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 06:15:25,604 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 255 GetRequests, 185 SyntacticMatches, 1 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1289 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=965, Invalid=4005, Unknown=0, NotChecked=0, Total=4970 [2021-11-20 06:15:25,604 INFO L933 BasicCegarLoop]: 151 mSDtfsCounter, 1256 mSDsluCounter, 756 mSDsCounter, 0 mSdLazyCounter, 1149 mSolverCounterSat, 577 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1256 SdHoareTripleChecker+Valid, 907 SdHoareTripleChecker+Invalid, 1726 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 577 IncrementalHoareTripleChecker+Valid, 1149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-11-20 06:15:25,605 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1256 Valid, 907 Invalid, 1726 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [577 Valid, 1149 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-11-20 06:15:25,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 06:15:25,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 06:15:25,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 06:15:25,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 06:15:25,606 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 89 [2021-11-20 06:15:25,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:15:25,606 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 06:15:25,606 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 7.157894736842105) internal successors, (136), 14 states have internal predecessors, (136), 7 states have call successors, (18), 10 states have call predecessors, (18), 8 states have return successors, (16), 8 states have call predecessors, (16), 7 states have call successors, (16) [2021-11-20 06:15:25,607 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 06:15:25,607 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 06:15:25,609 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 06:15:25,646 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 06:15:25,837 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-11-20 06:15:25,839 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 06:15:33,158 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 805 811) no Hoare annotation was computed. [2021-11-20 06:15:33,158 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 805 811) the Hoare annotation is: true [2021-11-20 06:15:33,159 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 596 607) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (= ~pumpRunning~0 1))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse7 (not (= |old(~methaneLevelCritical~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse5 .cse4) (or .cse2 .cse6 .cse5 .cse4 .cse7) (or .cse1 .cse2 .cse6 .cse4 .cse7))) [2021-11-20 06:15:33,159 INFO L858 garLoopResultBuilder]: For program point L600-1(lines 596 607) no Hoare annotation was computed. [2021-11-20 06:15:33,159 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 596 607) no Hoare annotation was computed. [2021-11-20 06:15:33,159 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 608 616) the Hoare annotation is: true [2021-11-20 06:15:33,159 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 608 616) no Hoare annotation was computed. [2021-11-20 06:15:33,159 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 608 616) no Hoare annotation was computed. [2021-11-20 06:15:33,159 INFO L858 garLoopResultBuilder]: For program point L576(lines 576 580) no Hoare annotation was computed. [2021-11-20 06:15:33,159 INFO L854 garLoopResultBuilder]: At program point L576-2(lines 572 583) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse1 .cse6 .cse2 .cse3) (or .cse5 .cse1 .cse4 .cse6 .cse3))) [2021-11-20 06:15:33,160 INFO L854 garLoopResultBuilder]: At program point L853(line 853) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse1 .cse6 .cse2 .cse3) (or .cse5 .cse1 .cse4 .cse6 .cse3))) [2021-11-20 06:15:33,160 INFO L854 garLoopResultBuilder]: At program point L560(lines 555 562) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2 .cse3) (or .cse0 .cse1 .cse5 .cse3) (or .cse1 .cse5 .cse4 .cse3))) [2021-11-20 06:15:33,160 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 781 804) no Hoare annotation was computed. [2021-11-20 06:15:33,160 INFO L854 garLoopResultBuilder]: At program point L895(lines 890 897) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse1 .cse5 .cse6 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse6 .cse3))) [2021-11-20 06:15:33,161 INFO L854 garLoopResultBuilder]: At program point L668(lines 663 671) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse1 .cse6 .cse2 .cse3) (or .cse5 .cse1 .cse4 .cse6 .cse3))) [2021-11-20 06:15:33,161 INFO L854 garLoopResultBuilder]: At program point L858(line 858) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse2 .cse3) (or .cse0 .cse6 .cse1 .cse3) (or .cse4 .cse5 .cse0 .cse6 .cse3))) [2021-11-20 06:15:33,161 INFO L854 garLoopResultBuilder]: At program point L858-1(lines 839 863) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 1))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and .cse8 .cse13)) (.cse0 (and .cse7 .cse12 .cse13)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (and .cse6 .cse7 .cse12)) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse8) .cse9 .cse1 .cse2 .cse5 .cse10) (or .cse9 (and .cse6 .cse8) .cse1 .cse11 .cse5 .cse10) (or .cse0 .cse1 .cse3 .cse4 .cse11 .cse5)))) [2021-11-20 06:15:33,161 INFO L858 garLoopResultBuilder]: For program point L792-1(lines 792 798) no Hoare annotation was computed. [2021-11-20 06:15:33,161 INFO L858 garLoopResultBuilder]: For program point L982(lines 982 986) no Hoare annotation was computed. [2021-11-20 06:15:33,161 INFO L858 garLoopResultBuilder]: For program point L693(lines 693 699) no Hoare annotation was computed. [2021-11-20 06:15:33,162 INFO L858 garLoopResultBuilder]: For program point L982-2(lines 982 986) no Hoare annotation was computed. [2021-11-20 06:15:33,162 INFO L858 garLoopResultBuilder]: For program point L689(lines 689 702) no Hoare annotation was computed. [2021-11-20 06:15:33,162 INFO L854 garLoopResultBuilder]: At program point L689-1(lines 674 706) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 1))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse9 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse14 (and .cse3 .cse13 .cse8)) (.cse10 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse3 .cse4 .cse5 .cse6 .cse7) .cse10) (or .cse0 .cse2 (and .cse3 .cse4 .cse6 .cse8) .cse11 .cse10 (and .cse9 .cse3 .cse4 .cse6)) (or (not (<= |old(~waterLevel~0)| 1)) .cse12 (and .cse5 .cse7) .cse0 .cse1) (or .cse12 .cse0 (and .cse9 .cse3 .cse13) .cse14 .cse11 .cse10) (or .cse12 .cse0 (and .cse9 .cse3 .cse4 .cse13) .cse1 .cse14 .cse10)))) [2021-11-20 06:15:33,162 INFO L854 garLoopResultBuilder]: At program point L681(line 681) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 1))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and .cse8 .cse13)) (.cse0 (and .cse7 .cse12 .cse13)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (and .cse6 .cse7 .cse12)) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse8) .cse9 .cse1 .cse2 .cse5 .cse10) (or .cse9 (and .cse6 .cse8) .cse1 .cse11 .cse5 .cse10) (or .cse0 .cse1 .cse3 .cse4 .cse11 .cse5)))) [2021-11-20 06:15:33,162 INFO L858 garLoopResultBuilder]: For program point L681-1(line 681) no Hoare annotation was computed. [2021-11-20 06:15:33,162 INFO L858 garLoopResultBuilder]: For program point L785-1(lines 784 803) no Hoare annotation was computed. [2021-11-20 06:15:33,162 INFO L858 garLoopResultBuilder]: For program point L847(lines 847 855) no Hoare annotation was computed. [2021-11-20 06:15:33,162 INFO L858 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2021-11-20 06:15:33,162 INFO L854 garLoopResultBuilder]: At program point L645(lines 640 648) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (= ~pumpRunning~0 1)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1|)) (.cse9 (<= ~waterLevel~0 1)) (.cse6 (<= |timeShift_getWaterLevel_#res#1| 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse5 (= |timeShift_getWaterLevel_#res#1| 1)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse6) (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and .cse7 .cse8 .cse9 .cse10) .cse5 (and .cse8 .cse10 .cse11) .cse3)) (let ((.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 .cse5 .cse4 .cse3 (and .cse8 .cse9 .cse12 .cse6 .cse11) (and .cse7 .cse8 .cse9 .cse12 .cse6))))) [2021-11-20 06:15:33,162 INFO L854 garLoopResultBuilder]: At program point L988(lines 973 991) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse1 .cse6 .cse2 .cse3) (or .cse5 .cse1 .cse4 .cse6 .cse3))) [2021-11-20 06:15:33,163 INFO L854 garLoopResultBuilder]: At program point L914(lines 909 917) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2 .cse3) (or .cse1 .cse5 .cse4 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5) (or .cse0 .cse1 .cse5 .cse3 (and (= |timeShift_isPumpRunning_#res#1| 1) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1|) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))))) [2021-11-20 06:15:33,163 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 781 804) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (and .cse8 (= ~pumpRunning~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse8)) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse3 .cse4 .cse6) (or .cse2 .cse7 .cse5 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse7 .cse4)))) [2021-11-20 06:15:33,163 INFO L858 garLoopResultBuilder]: For program point L559(line 559) no Hoare annotation was computed. [2021-11-20 06:15:33,163 INFO L858 garLoopResultBuilder]: For program point L683(lines 683 703) no Hoare annotation was computed. [2021-11-20 06:15:33,163 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 781 804) no Hoare annotation was computed. [2021-11-20 06:15:33,163 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 559) no Hoare annotation was computed. [2021-11-20 06:15:33,164 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-11-20 06:15:33,164 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-11-20 06:15:33,164 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-11-20 06:15:33,164 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-11-20 06:15:33,164 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-11-20 06:15:33,164 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-11-20 06:15:33,165 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-11-20 06:15:33,165 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-11-20 06:15:33,165 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-11-20 06:15:33,165 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-11-20 06:15:33,165 INFO L858 garLoopResultBuilder]: For program point L729(lines 729 735) no Hoare annotation was computed. [2021-11-20 06:15:33,165 INFO L854 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 06:15:33,165 INFO L858 garLoopResultBuilder]: For program point L729-1(lines 729 735) no Hoare annotation was computed. [2021-11-20 06:15:33,166 INFO L858 garLoopResultBuilder]: For program point L721(lines 721 725) no Hoare annotation was computed. [2021-11-20 06:15:33,166 INFO L854 garLoopResultBuilder]: At program point L176(lines 172 178) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 06:15:33,166 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 06:15:33,166 INFO L854 garLoopResultBuilder]: At program point L767(lines 718 768) the Hoare annotation is: false [2021-11-20 06:15:33,166 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 06:15:33,166 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 06:15:33,167 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2021-11-20 06:15:33,167 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2021-11-20 06:15:33,167 INFO L854 garLoopResultBuilder]: At program point L169(lines 165 171) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 06:15:33,167 INFO L858 garLoopResultBuilder]: For program point L739(lines 739 745) no Hoare annotation was computed. [2021-11-20 06:15:33,167 INFO L858 garLoopResultBuilder]: For program point L739-1(lines 739 745) no Hoare annotation was computed. [2021-11-20 06:15:33,167 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 06:15:33,168 INFO L854 garLoopResultBuilder]: At program point L764(lines 719 766) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse3 (<= ~waterLevel~0 2)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse1 .cse5 .cse2 .cse3) (and .cse6 .cse0 (<= ~waterLevel~0 1) .cse1 .cse2))) [2021-11-20 06:15:33,168 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2021-11-20 06:15:33,168 INFO L854 garLoopResultBuilder]: At program point L731(line 731) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse3 (<= ~waterLevel~0 2)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse1 .cse5 .cse2 .cse3) (and .cse6 .cse0 (<= ~waterLevel~0 1) .cse1 .cse2))) [2021-11-20 06:15:33,168 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2021-11-20 06:15:33,168 INFO L858 garLoopResultBuilder]: For program point L757(lines 757 761) no Hoare annotation was computed. [2021-11-20 06:15:33,168 INFO L854 garLoopResultBuilder]: At program point L757-2(lines 749 762) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse2 .cse3))) [2021-11-20 06:15:33,169 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 06:15:33,169 INFO L858 garLoopResultBuilder]: For program point L720(lines 719 766) no Hoare annotation was computed. [2021-11-20 06:15:33,169 INFO L858 garLoopResultBuilder]: For program point L749(lines 749 762) no Hoare annotation was computed. [2021-11-20 06:15:33,169 INFO L854 garLoopResultBuilder]: At program point L741(line 741) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse2 .cse3))) [2021-11-20 06:15:33,169 INFO L854 garLoopResultBuilder]: At program point L997(lines 992 999) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse2 .cse3))) [2021-11-20 06:15:33,170 INFO L861 garLoopResultBuilder]: At program point L770(lines 709 774) the Hoare annotation is: true [2021-11-20 06:15:33,170 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 813 837) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse8 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse7 .cse8) (or .cse5 .cse6 .cse0 .cse8 .cse2) (or .cse0 .cse7 .cse1 .cse3 .cse4))) [2021-11-20 06:15:33,170 INFO L854 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse7) (or .cse5 .cse0 .cse7 .cse2) (or .cse0 .cse6 .cse1 .cse3 .cse4))) [2021-11-20 06:15:33,170 INFO L858 garLoopResultBuilder]: For program point L832-1(lines 813 837) no Hoare annotation was computed. [2021-11-20 06:15:33,170 INFO L858 garLoopResultBuilder]: For program point L880(lines 880 886) no Hoare annotation was computed. [2021-11-20 06:15:33,171 INFO L854 garLoopResultBuilder]: At program point L880-2(lines 873 889) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 1))) (let ((.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0)) (.cse7 (= ~pumpRunning~0 1)) (.cse4 (not (= 1 ~systemActive~0))) (.cse12 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not .cse3))) (and (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0))) (or .cse0 (and .cse1 .cse2 .cse3) .cse4 (and .cse5 .cse6 .cse7) (and .cse1 .cse2 .cse5 .cse6) (and .cse3 .cse7) .cse8 .cse9)) (or .cse4 .cse10 .cse9 .cse11) (let ((.cse13 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)) (.cse14 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|))) (or .cse0 .cse4 .cse12 (and .cse3 .cse13 .cse14 .cse7) .cse8 (and .cse13 .cse14 .cse5 .cse6 .cse7))) (or .cse4 .cse12 .cse10 .cse11)))) [2021-11-20 06:15:33,171 INFO L858 garLoopResultBuilder]: For program point L653(lines 653 659) no Hoare annotation was computed. [2021-11-20 06:15:33,171 INFO L854 garLoopResultBuilder]: At program point L969(lines 954 972) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (<= ~waterLevel~0 1))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not .cse11)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and .cse9 .cse10 .cse11)) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (and .cse9 .cse10 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse6 .cse7 .cse8) (or .cse0 .cse7 .cse1 .cse3) (or .cse4 .cse5 .cse0 .cse6 .cse8 .cse2)))) [2021-11-20 06:15:33,171 INFO L854 garLoopResultBuilder]: At program point L905(lines 898 908) the Hoare annotation is: (let ((.cse9 (= 1 ~systemActive~0)) (.cse6 (<= ~waterLevel~0 1))) (let ((.cse12 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not .cse6)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse9)) (.cse13 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse10 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse7 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (or (and .cse4 .cse5 .cse6 .cse7) .cse8 .cse0 (and .cse4 .cse5 .cse9 .cse7 .cse10 .cse11) .cse12 .cse13)) (or .cse0 .cse12 .cse1 .cse3) (or .cse8 (and .cse4 .cse5 .cse6) .cse0 .cse13 .cse2 (and .cse4 .cse5 .cse9 .cse10 .cse11))))) [2021-11-20 06:15:33,171 INFO L854 garLoopResultBuilder]: At program point L903(line 903) the Hoare annotation is: (let ((.cse11 (= 1 ~systemActive~0)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse12 (<= ~waterLevel~0 1))) (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not .cse12)) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and .cse9 .cse10 .cse12)) (.cse0 (not .cse11)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse8 (and .cse9 .cse10 .cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse3) (or .cse5 .cse6 .cse0 .cse7 .cse2 .cse8) (or .cse5 .cse6 .cse0 .cse4 .cse7 .cse8)))) [2021-11-20 06:15:33,172 INFO L858 garLoopResultBuilder]: For program point L903-1(line 903) no Hoare annotation was computed. [2021-11-20 06:15:33,172 INFO L858 garLoopResultBuilder]: For program point L963(lines 963 967) no Hoare annotation was computed. [2021-11-20 06:15:33,172 INFO L858 garLoopResultBuilder]: For program point L963-2(lines 963 967) no Hoare annotation was computed. [2021-11-20 06:15:33,172 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 813 837) no Hoare annotation was computed. [2021-11-20 06:15:33,172 INFO L854 garLoopResultBuilder]: At program point L827(line 827) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0 1))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse8)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (not .cse8))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse4 .cse6) (or .cse2 .cse3 .cse5 .cse7)))) [2021-11-20 06:15:33,172 INFO L858 garLoopResultBuilder]: For program point L821(lines 821 829) no Hoare annotation was computed. [2021-11-20 06:15:33,173 INFO L854 garLoopResultBuilder]: At program point L658(lines 649 662) the Hoare annotation is: (let ((.cse13 (= ~methaneLevelCritical~0 0)) (.cse10 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~pumpRunning~0 0)) (.cse14 (<= ~waterLevel~0 1)) (.cse15 (= 1 ~systemActive~0)) (.cse16 (= ~methaneLevelCritical~0 1))) (let ((.cse5 (and .cse10 .cse11 .cse12 .cse14 .cse15 .cse16)) (.cse8 (not .cse16)) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not .cse14)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse15)) (.cse6 (and .cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse2 (not .cse13)) (.cse7 (not (<= ~waterLevel~0 2))) (.cse3 (and .cse10 .cse11 .cse12 .cse13 .cse14 .cse15))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse6 .cse7 .cse8) (or .cse0 .cse5 .cse1 .cse8 .cse4) (or .cse1 .cse9 .cse8 .cse4) (or .cse1 .cse2 .cse9 .cse4) (or .cse0 .cse1 .cse6 .cse2 .cse7 .cse3)))) [2021-11-20 06:15:33,173 INFO L858 garLoopResultBuilder]: For program point L817(lines 817 834) no Hoare annotation was computed. [2021-11-20 06:15:33,173 INFO L854 garLoopResultBuilder]: At program point L869(lines 864 871) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0 1))) (let ((.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0)) (.cse4 (= ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse9 (not .cse5))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) (and .cse5 .cse4) .cse6 .cse7) (or .cse1 .cse8 .cse7 .cse9) (let ((.cse11 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)) (.cse12 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|))) (or .cse0 .cse1 .cse10 (and .cse5 .cse11 .cse12 .cse4) .cse6 (and .cse11 .cse12 .cse2 .cse3 .cse4))) (or .cse1 .cse10 .cse8 .cse9)))) [2021-11-20 06:15:33,173 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 584 595) no Hoare annotation was computed. [2021-11-20 06:15:33,173 INFO L858 garLoopResultBuilder]: For program point L588-1(lines 584 595) no Hoare annotation was computed. [2021-11-20 06:15:33,174 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 584 595) the Hoare annotation is: (let ((.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~pumpRunning~0 1))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse0 .cse6 .cse3) (or .cse5 .cse0 .cse2 .cse3 .cse4) (or .cse0 .cse6 .cse1 .cse3 .cse4))) [2021-11-20 06:15:33,177 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:15:33,179 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 06:15:33,232 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 06:15:33 BoogieIcfgContainer [2021-11-20 06:15:33,232 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 06:15:33,233 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 06:15:33,233 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 06:15:33,233 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 06:15:33,234 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:15:16" (3/4) ... [2021-11-20 06:15:33,237 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 06:15:33,243 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 06:15:33,244 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 06:15:33,244 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-11-20 06:15:33,244 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 06:15:33,244 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 06:15:33,245 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 06:15:33,245 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 06:15:33,255 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-11-20 06:15:33,256 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 06:15:33,257 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 06:15:33,258 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 06:15:33,258 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 06:15:33,259 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 06:15:33,260 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 06:15:33,284 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) [2021-11-20 06:15:33,285 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) [2021-11-20 06:15:33,286 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((((methaneLevelCritical == tmp && waterLevel <= 1) && tmp___0 <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && tmp___0 <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((methaneLevelCritical == tmp && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && waterLevel <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && methaneLevelCritical == tmp) && \old(waterLevel) == waterLevel)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) [2021-11-20 06:15:33,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \result == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == methaneLevelCritical) && \result == 0) && tmp == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) [2021-11-20 06:15:33,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) [2021-11-20 06:15:33,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \result == 1)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || ((((methaneLevelCritical == tmp && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || ((((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) [2021-11-20 06:15:33,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1)) && (((((!(\old(pumpRunning) == 0) || (((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || (((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive)) [2021-11-20 06:15:33,288 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || ((\result == 0 && tmp == 0) && pumpRunning == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp == 0)) || (waterLevel <= 1 && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((waterLevel <= 1 && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || !(waterLevel <= 2)) || ((((\result == methaneLevelCritical && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) [2021-11-20 06:15:33,288 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\result == 0 && tmp == 0) && pumpRunning == 1)) || (waterLevel <= 1 && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((waterLevel <= 1 && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || !(waterLevel <= 2)) || ((((\result == methaneLevelCritical && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) [2021-11-20 06:15:33,288 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) [2021-11-20 06:15:33,288 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((\result == 1 && methaneLevelCritical == tmp) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) [2021-11-20 06:15:33,289 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) [2021-11-20 06:15:33,289 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) [2021-11-20 06:15:33,289 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) [2021-11-20 06:15:33,322 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 06:15:33,325 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 06:15:33,326 INFO L158 Benchmark]: Toolchain (without parser) took 18611.48ms. Allocated memory was 104.9MB in the beginning and 188.7MB in the end (delta: 83.9MB). Free memory was 75.7MB in the beginning and 152.0MB in the end (delta: -76.3MB). Peak memory consumption was 7.5MB. Max. memory is 16.1GB. [2021-11-20 06:15:33,327 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 104.9MB. Free memory was 62.9MB in the beginning and 62.8MB in the end (delta: 117.7kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 06:15:33,327 INFO L158 Benchmark]: CACSL2BoogieTranslator took 597.36ms. Allocated memory is still 104.9MB. Free memory was 75.4MB in the beginning and 69.9MB in the end (delta: 5.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-20 06:15:33,328 INFO L158 Benchmark]: Boogie Procedure Inliner took 87.21ms. Allocated memory is still 104.9MB. Free memory was 69.9MB in the beginning and 67.2MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 06:15:33,328 INFO L158 Benchmark]: Boogie Preprocessor took 35.60ms. Allocated memory is still 104.9MB. Free memory was 67.2MB in the beginning and 65.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 06:15:33,329 INFO L158 Benchmark]: RCFGBuilder took 646.77ms. Allocated memory is still 104.9MB. Free memory was 65.5MB in the beginning and 49.0MB in the end (delta: 16.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-20 06:15:33,330 INFO L158 Benchmark]: TraceAbstraction took 17142.97ms. Allocated memory was 104.9MB in the beginning and 188.7MB in the end (delta: 83.9MB). Free memory was 48.5MB in the beginning and 159.4MB in the end (delta: -110.9MB). Peak memory consumption was 87.3MB. Max. memory is 16.1GB. [2021-11-20 06:15:33,330 INFO L158 Benchmark]: Witness Printer took 92.76ms. Allocated memory is still 188.7MB. Free memory was 159.4MB in the beginning and 152.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-20 06:15:33,332 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 104.9MB. Free memory was 62.9MB in the beginning and 62.8MB in the end (delta: 117.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 597.36ms. Allocated memory is still 104.9MB. Free memory was 75.4MB in the beginning and 69.9MB in the end (delta: 5.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 87.21ms. Allocated memory is still 104.9MB. Free memory was 69.9MB in the beginning and 67.2MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 35.60ms. Allocated memory is still 104.9MB. Free memory was 67.2MB in the beginning and 65.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 646.77ms. Allocated memory is still 104.9MB. Free memory was 65.5MB in the beginning and 49.0MB in the end (delta: 16.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 17142.97ms. Allocated memory was 104.9MB in the beginning and 188.7MB in the end (delta: 83.9MB). Free memory was 48.5MB in the beginning and 159.4MB in the end (delta: -110.9MB). Peak memory consumption was 87.3MB. Max. memory is 16.1GB. * Witness Printer took 92.76ms. Allocated memory is still 188.7MB. Free memory was 159.4MB in the beginning and 152.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 559]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.0s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3280 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3247 mSDsluCounter, 5215 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3608 mSDsCounter, 1166 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3774 IncrementalHoareTripleChecker+Invalid, 4940 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1166 mSolverCounterUnsat, 1607 mSDtfsCounter, 3774 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 550 GetRequests, 345 SyntacticMatches, 1 SemanticMatches, 204 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2027 ImplicationChecksByTransitivity, 1.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=758occurred in iteration=10, InterpolantAutomatonStates: 181, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 13 MinimizatonAttempts, 470 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 2137 PreInvPairs, 2513 NumberOfFragments, 3053 HoareAnnotationTreeSize, 2137 FomulaSimplifications, 849 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 44 FomulaSimplificationsInter, 31612 FormulaSimplificationTreeSizeReductionInter, 6.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 777 NumberOfCodeBlocks, 777 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 850 ConstructedInterpolants, 0 QuantifiedInterpolants, 1680 SizeOfPredicates, 8 NumberOfNonLiveVariables, 837 ConjunctsInSsa, 28 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 73/93 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 649]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1)) && (((((!(\old(pumpRunning) == 0) || (((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || (((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive)) - InvariantResult [Line: 864]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\result == 0 && tmp == 0) && pumpRunning == 1)) || (waterLevel <= 1 && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((waterLevel <= 1 && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || !(waterLevel <= 2)) || ((((\result == methaneLevelCritical && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 674]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || (((((methaneLevelCritical == tmp && waterLevel <= 1) && tmp___0 <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && tmp___0 <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (((methaneLevelCritical == tmp && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && waterLevel <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && methaneLevelCritical == tmp) && \old(waterLevel) == waterLevel)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 992]: Loop Invariant Derived loop invariant: ((((((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || ((((1 == systemActive && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1)) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || ((((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || ((\result == 0 && tmp == 0) && pumpRunning == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp == 0)) || (waterLevel <= 1 && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((waterLevel <= 1 && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || !(waterLevel <= 2)) || ((((\result == methaneLevelCritical && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 898]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \result == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == methaneLevelCritical) && \result == 0) && tmp == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) - InvariantResult [Line: 709]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: (((((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 909]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((\result == 1 && methaneLevelCritical == tmp) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 572]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: ((((((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || ((((1 == systemActive && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1)) || ((((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2)) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 640]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \result == 1)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || ((((methaneLevelCritical == tmp && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || ((((pumpRunning == 0 && methaneLevelCritical == tmp) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) RESULT: Ultimate proved your program to be correct! [2021-11-20 06:15:33,417 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6bb9dd67-3506-482d-80dc-82333e33dd55/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE