./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 18:46:14,441 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 18:46:14,443 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 18:46:14,465 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 18:46:14,465 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 18:46:14,466 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 18:46:14,467 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 18:46:14,469 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 18:46:14,471 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 18:46:14,471 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 18:46:14,472 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 18:46:14,473 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 18:46:14,474 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 18:46:14,474 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 18:46:14,476 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 18:46:14,477 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 18:46:14,478 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 18:46:14,478 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 18:46:14,480 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 18:46:14,482 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 18:46:14,483 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 18:46:14,484 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 18:46:14,485 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 18:46:14,486 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 18:46:14,489 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 18:46:14,489 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 18:46:14,489 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 18:46:14,490 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 18:46:14,491 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 18:46:14,491 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 18:46:14,492 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 18:46:14,492 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 18:46:14,493 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 18:46:14,494 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 18:46:14,494 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 18:46:14,495 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 18:46:14,495 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 18:46:14,496 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 18:46:14,496 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 18:46:14,497 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 18:46:14,497 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 18:46:14,498 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 18:46:14,515 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 18:46:14,515 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 18:46:14,516 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 18:46:14,516 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 18:46:14,516 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 18:46:14,516 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 18:46:14,517 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 18:46:14,517 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 18:46:14,517 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 18:46:14,517 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 18:46:14,518 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 18:46:14,518 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 18:46:14,518 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 18:46:14,518 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 18:46:14,518 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 18:46:14,518 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 18:46:14,518 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 18:46:14,518 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 18:46:14,518 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 18:46:14,519 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 18:46:14,519 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 18:46:14,519 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 18:46:14,519 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 18:46:14,519 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 18:46:14,519 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 18:46:14,519 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 18:46:14,520 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 18:46:14,520 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 18:46:14,520 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 18:46:14,520 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 18:46:14,520 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 18:46:14,520 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 18:46:14,520 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 18:46:14,520 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 18:46:14,521 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 [2021-12-06 18:46:14,705 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 18:46:14,721 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 18:46:14,723 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 18:46:14,724 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 18:46:14,724 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 18:46:14,726 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2021-12-06 18:46:14,768 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/data/db022a9ed/78c75c5bc9594ac0aee7cbda8320c09c/FLAG8cdfcede8 [2021-12-06 18:46:15,165 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 18:46:15,165 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2021-12-06 18:46:15,176 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/data/db022a9ed/78c75c5bc9594ac0aee7cbda8320c09c/FLAG8cdfcede8 [2021-12-06 18:46:15,185 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/data/db022a9ed/78c75c5bc9594ac0aee7cbda8320c09c [2021-12-06 18:46:15,187 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 18:46:15,188 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 18:46:15,189 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 18:46:15,189 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 18:46:15,192 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 18:46:15,192 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,193 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3d8cb20a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15, skipping insertion in model container [2021-12-06 18:46:15,193 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,199 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 18:46:15,235 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 18:46:15,417 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2021-12-06 18:46:15,434 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 18:46:15,441 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 18:46:15,481 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2021-12-06 18:46:15,491 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 18:46:15,504 INFO L208 MainTranslator]: Completed translation [2021-12-06 18:46:15,504 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15 WrapperNode [2021-12-06 18:46:15,504 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 18:46:15,505 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 18:46:15,505 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 18:46:15,505 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 18:46:15,511 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,522 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,543 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 274 [2021-12-06 18:46:15,544 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 18:46:15,544 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 18:46:15,544 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 18:46:15,544 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 18:46:15,551 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,551 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,553 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,553 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,558 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,562 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,564 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,566 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 18:46:15,567 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 18:46:15,567 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 18:46:15,567 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 18:46:15,568 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (1/1) ... [2021-12-06 18:46:15,574 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 18:46:15,584 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 18:46:15,595 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 18:46:15,597 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 18:46:15,631 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 18:46:15,631 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 18:46:15,631 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 18:46:15,631 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-06 18:46:15,631 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-06 18:46:15,632 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 18:46:15,632 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 18:46:15,632 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 18:46:15,632 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 18:46:15,632 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 18:46:15,632 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 18:46:15,632 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 18:46:15,632 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 18:46:15,633 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-06 18:46:15,633 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-06 18:46:15,633 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 18:46:15,633 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 18:46:15,633 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 18:46:15,633 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 18:46:15,633 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 18:46:15,691 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 18:46:15,693 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 18:46:15,919 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 18:46:15,927 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 18:46:15,927 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 18:46:15,929 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 06:46:15 BoogieIcfgContainer [2021-12-06 18:46:15,929 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 18:46:15,931 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 18:46:15,931 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 18:46:15,934 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 18:46:15,935 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 06:46:15" (1/3) ... [2021-12-06 18:46:15,935 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a6afbe3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 06:46:15, skipping insertion in model container [2021-12-06 18:46:15,935 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:46:15" (2/3) ... [2021-12-06 18:46:15,936 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a6afbe3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 06:46:15, skipping insertion in model container [2021-12-06 18:46:15,936 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 06:46:15" (3/3) ... [2021-12-06 18:46:15,937 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.c [2021-12-06 18:46:15,943 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 18:46:15,943 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 18:46:15,982 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 18:46:15,987 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 18:46:15,988 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 18:46:16,006 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-06 18:46:16,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2021-12-06 18:46:16,014 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:16,014 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:16,015 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:16,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:16,020 INFO L85 PathProgramCache]: Analyzing trace with hash 47908020, now seen corresponding path program 1 times [2021-12-06 18:46:16,028 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:16,029 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [462350044] [2021-12-06 18:46:16,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:16,030 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:16,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 18:46:16,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,181 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:46:16,181 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:16,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [462350044] [2021-12-06 18:46:16,182 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [462350044] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:16,182 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:46:16,182 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 18:46:16,183 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1859357327] [2021-12-06 18:46:16,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:16,187 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 18:46:16,187 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:16,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 18:46:16,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 18:46:16,213 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:46:16,238 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:16,238 INFO L93 Difference]: Finished difference Result 190 states and 257 transitions. [2021-12-06 18:46:16,239 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 18:46:16,240 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2021-12-06 18:46:16,240 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:16,247 INFO L225 Difference]: With dead ends: 190 [2021-12-06 18:46:16,247 INFO L226 Difference]: Without dead ends: 90 [2021-12-06 18:46:16,250 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 18:46:16,253 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:16,254 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 18:46:16,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-12-06 18:46:16,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-12-06 18:46:16,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-06 18:46:16,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2021-12-06 18:46:16,287 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 23 [2021-12-06 18:46:16,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:16,287 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2021-12-06 18:46:16,288 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:46:16,288 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2021-12-06 18:46:16,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-06 18:46:16,290 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:16,290 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:16,290 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 18:46:16,290 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:16,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:16,291 INFO L85 PathProgramCache]: Analyzing trace with hash 776313737, now seen corresponding path program 1 times [2021-12-06 18:46:16,291 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:16,291 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [145275546] [2021-12-06 18:46:16,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:16,291 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:16,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-06 18:46:16,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,343 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:46:16,343 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:16,343 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [145275546] [2021-12-06 18:46:16,343 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [145275546] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:16,344 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:46:16,344 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 18:46:16,344 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2077209874] [2021-12-06 18:46:16,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:16,345 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 18:46:16,345 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:16,345 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 18:46:16,346 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 18:46:16,346 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:46:16,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:16,359 INFO L93 Difference]: Finished difference Result 141 states and 181 transitions. [2021-12-06 18:46:16,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 18:46:16,360 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2021-12-06 18:46:16,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:16,361 INFO L225 Difference]: With dead ends: 141 [2021-12-06 18:46:16,361 INFO L226 Difference]: Without dead ends: 81 [2021-12-06 18:46:16,362 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 18:46:16,363 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 17 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:16,363 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 184 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 18:46:16,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-06 18:46:16,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-06 18:46:16,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 70 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-06 18:46:16,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2021-12-06 18:46:16,372 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 24 [2021-12-06 18:46:16,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:16,372 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2021-12-06 18:46:16,373 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:46:16,373 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2021-12-06 18:46:16,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2021-12-06 18:46:16,374 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:16,374 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:16,374 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 18:46:16,374 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:16,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:16,375 INFO L85 PathProgramCache]: Analyzing trace with hash -6644295, now seen corresponding path program 1 times [2021-12-06 18:46:16,375 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:16,375 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [655330589] [2021-12-06 18:46:16,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:16,375 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:16,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 18:46:16,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,434 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:46:16,434 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:16,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [655330589] [2021-12-06 18:46:16,434 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [655330589] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:16,434 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:46:16,435 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 18:46:16,435 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [532986446] [2021-12-06 18:46:16,435 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:16,435 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 18:46:16,435 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:16,436 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 18:46:16,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 18:46:16,436 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:46:16,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:16,500 INFO L93 Difference]: Finished difference Result 197 states and 256 transitions. [2021-12-06 18:46:16,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 18:46:16,501 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2021-12-06 18:46:16,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:16,502 INFO L225 Difference]: With dead ends: 197 [2021-12-06 18:46:16,502 INFO L226 Difference]: Without dead ends: 123 [2021-12-06 18:46:16,503 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 18:46:16,504 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 167 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:16,505 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [167 Valid, 348 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 18:46:16,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2021-12-06 18:46:16,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 120. [2021-12-06 18:46:16,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 91 states have (on average 1.3406593406593406) internal successors, (122), 102 states have internal predecessors, (122), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (17), 12 states have call predecessors, (17), 16 states have call successors, (17) [2021-12-06 18:46:16,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 155 transitions. [2021-12-06 18:46:16,519 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 155 transitions. Word has length 29 [2021-12-06 18:46:16,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:16,519 INFO L470 AbstractCegarLoop]: Abstraction has 120 states and 155 transitions. [2021-12-06 18:46:16,520 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:46:16,520 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 155 transitions. [2021-12-06 18:46:16,521 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-06 18:46:16,521 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:16,521 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:16,521 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 18:46:16,521 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:16,522 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:16,522 INFO L85 PathProgramCache]: Analyzing trace with hash -999312607, now seen corresponding path program 1 times [2021-12-06 18:46:16,523 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:16,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1408172507] [2021-12-06 18:46:16,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:16,524 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:16,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 18:46:16,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,578 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:46:16,578 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:16,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1408172507] [2021-12-06 18:46:16,579 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1408172507] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:16,579 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:46:16,579 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 18:46:16,579 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [162530139] [2021-12-06 18:46:16,579 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:16,580 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 18:46:16,580 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:16,580 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 18:46:16,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 18:46:16,581 INFO L87 Difference]: Start difference. First operand 120 states and 155 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:46:16,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:16,655 INFO L93 Difference]: Finished difference Result 346 states and 458 transitions. [2021-12-06 18:46:16,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 18:46:16,656 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2021-12-06 18:46:16,656 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:16,658 INFO L225 Difference]: With dead ends: 346 [2021-12-06 18:46:16,658 INFO L226 Difference]: Without dead ends: 233 [2021-12-06 18:46:16,659 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-06 18:46:16,660 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 75 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 509 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:16,660 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 509 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 18:46:16,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 233 states. [2021-12-06 18:46:16,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 233 to 227. [2021-12-06 18:46:16,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 170 states have (on average 1.3294117647058823) internal successors, (226), 191 states have internal predecessors, (226), 32 states have call successors, (32), 24 states have call predecessors, (32), 24 states have return successors, (36), 24 states have call predecessors, (36), 32 states have call successors, (36) [2021-12-06 18:46:16,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 294 transitions. [2021-12-06 18:46:16,690 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 294 transitions. Word has length 32 [2021-12-06 18:46:16,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:16,690 INFO L470 AbstractCegarLoop]: Abstraction has 227 states and 294 transitions. [2021-12-06 18:46:16,691 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:46:16,691 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 294 transitions. [2021-12-06 18:46:16,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-12-06 18:46:16,693 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:16,693 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:16,693 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 18:46:16,693 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:16,694 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:16,694 INFO L85 PathProgramCache]: Analyzing trace with hash -756738107, now seen corresponding path program 1 times [2021-12-06 18:46:16,694 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:16,694 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1503379123] [2021-12-06 18:46:16,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:16,694 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:16,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 18:46:16,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-06 18:46:16,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:46:16,746 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:16,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1503379123] [2021-12-06 18:46:16,746 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1503379123] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:16,746 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:46:16,746 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 18:46:16,746 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1672420087] [2021-12-06 18:46:16,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:16,747 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 18:46:16,747 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:16,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 18:46:16,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 18:46:16,748 INFO L87 Difference]: Start difference. First operand 227 states and 294 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 18:46:16,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:16,913 INFO L93 Difference]: Finished difference Result 528 states and 702 transitions. [2021-12-06 18:46:16,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 18:46:16,913 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2021-12-06 18:46:16,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:16,915 INFO L225 Difference]: With dead ends: 528 [2021-12-06 18:46:16,916 INFO L226 Difference]: Without dead ends: 308 [2021-12-06 18:46:16,917 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 18:46:16,918 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 125 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 209 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 252 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 209 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:16,918 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [130 Valid, 242 Invalid, 252 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 209 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:46:16,919 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2021-12-06 18:46:16,938 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 297. [2021-12-06 18:46:16,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 297 states, 224 states have (on average 1.2723214285714286) internal successors, (285), 245 states have internal predecessors, (285), 38 states have call successors, (38), 34 states have call predecessors, (38), 34 states have return successors, (53), 36 states have call predecessors, (53), 38 states have call successors, (53) [2021-12-06 18:46:16,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 297 states to 297 states and 376 transitions. [2021-12-06 18:46:16,941 INFO L78 Accepts]: Start accepts. Automaton has 297 states and 376 transitions. Word has length 36 [2021-12-06 18:46:16,941 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:16,941 INFO L470 AbstractCegarLoop]: Abstraction has 297 states and 376 transitions. [2021-12-06 18:46:16,941 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 18:46:16,942 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 376 transitions. [2021-12-06 18:46:16,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-06 18:46:16,944 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:16,944 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:16,944 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 18:46:16,944 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:16,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:16,944 INFO L85 PathProgramCache]: Analyzing trace with hash -1441513323, now seen corresponding path program 1 times [2021-12-06 18:46:16,945 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:16,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105965778] [2021-12-06 18:46:16,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:16,945 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:16,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 18:46:16,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:16,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 18:46:16,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:46:17,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-06 18:46:17,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,006 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 18:46:17,006 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:17,006 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105965778] [2021-12-06 18:46:17,006 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2105965778] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:17,007 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:46:17,007 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 18:46:17,007 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [163735548] [2021-12-06 18:46:17,007 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:17,007 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 18:46:17,007 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:17,008 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 18:46:17,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 18:46:17,008 INFO L87 Difference]: Start difference. First operand 297 states and 376 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:46:17,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:17,193 INFO L93 Difference]: Finished difference Result 645 states and 837 transitions. [2021-12-06 18:46:17,193 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 18:46:17,193 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2021-12-06 18:46:17,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:17,195 INFO L225 Difference]: With dead ends: 645 [2021-12-06 18:46:17,196 INFO L226 Difference]: Without dead ends: 355 [2021-12-06 18:46:17,197 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-06 18:46:17,197 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 133 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 262 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 312 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 262 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:17,198 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [134 Valid, 255 Invalid, 312 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 262 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:46:17,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2021-12-06 18:46:17,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 343. [2021-12-06 18:46:17,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 260 states have (on average 1.2461538461538462) internal successors, (324), 281 states have internal predecessors, (324), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (63), 44 states have call predecessors, (63), 42 states have call successors, (63) [2021-12-06 18:46:17,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 429 transitions. [2021-12-06 18:46:17,220 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 429 transitions. Word has length 55 [2021-12-06 18:46:17,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:17,220 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 429 transitions. [2021-12-06 18:46:17,221 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:46:17,221 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 429 transitions. [2021-12-06 18:46:17,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-06 18:46:17,222 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:17,222 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:17,222 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 18:46:17,222 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:17,223 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:17,223 INFO L85 PathProgramCache]: Analyzing trace with hash -468214013, now seen corresponding path program 1 times [2021-12-06 18:46:17,223 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:17,223 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [306714561] [2021-12-06 18:46:17,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:17,223 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:17,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 18:46:17,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-06 18:46:17,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:46:17,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-06 18:46:17,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,264 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 18:46:17,264 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:17,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [306714561] [2021-12-06 18:46:17,264 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [306714561] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:17,264 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:46:17,264 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 18:46:17,264 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [934012621] [2021-12-06 18:46:17,264 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:17,265 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 18:46:17,265 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:17,265 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 18:46:17,265 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 18:46:17,265 INFO L87 Difference]: Start difference. First operand 343 states and 429 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:46:17,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:17,401 INFO L93 Difference]: Finished difference Result 685 states and 856 transitions. [2021-12-06 18:46:17,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 18:46:17,401 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 58 [2021-12-06 18:46:17,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:17,404 INFO L225 Difference]: With dead ends: 685 [2021-12-06 18:46:17,404 INFO L226 Difference]: Without dead ends: 349 [2021-12-06 18:46:17,406 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 18:46:17,407 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 159 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 230 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:17,407 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [163 Valid, 230 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:46:17,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2021-12-06 18:46:17,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 343. [2021-12-06 18:46:17,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 260 states have (on average 1.2384615384615385) internal successors, (322), 281 states have internal predecessors, (322), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2021-12-06 18:46:17,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 423 transitions. [2021-12-06 18:46:17,437 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 423 transitions. Word has length 58 [2021-12-06 18:46:17,437 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:17,437 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 423 transitions. [2021-12-06 18:46:17,437 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:46:17,437 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 423 transitions. [2021-12-06 18:46:17,438 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-06 18:46:17,439 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:17,439 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:17,439 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 18:46:17,439 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:17,440 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:17,440 INFO L85 PathProgramCache]: Analyzing trace with hash -1379473709, now seen corresponding path program 1 times [2021-12-06 18:46:17,440 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:17,440 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [6991440] [2021-12-06 18:46:17,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:17,441 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:17,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 18:46:17,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 18:46:17,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:46:17,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-06 18:46:17,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,502 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 18:46:17,502 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:17,503 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [6991440] [2021-12-06 18:46:17,503 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [6991440] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:17,503 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:46:17,503 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 18:46:17,503 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1838441138] [2021-12-06 18:46:17,503 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:17,503 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 18:46:17,503 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:17,504 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 18:46:17,504 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 18:46:17,504 INFO L87 Difference]: Start difference. First operand 343 states and 423 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:46:17,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:17,649 INFO L93 Difference]: Finished difference Result 697 states and 878 transitions. [2021-12-06 18:46:17,649 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 18:46:17,649 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2021-12-06 18:46:17,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:17,651 INFO L225 Difference]: With dead ends: 697 [2021-12-06 18:46:17,651 INFO L226 Difference]: Without dead ends: 361 [2021-12-06 18:46:17,652 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-06 18:46:17,653 INFO L933 BasicCegarLoop]: 88 mSDtfsCounter, 137 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 216 SdHoareTripleChecker+Invalid, 239 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:17,653 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [138 Valid, 216 Invalid, 239 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:46:17,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 361 states. [2021-12-06 18:46:17,668 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 361 to 347. [2021-12-06 18:46:17,669 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 264 states have (on average 1.2348484848484849) internal successors, (326), 285 states have internal predecessors, (326), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2021-12-06 18:46:17,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 427 transitions. [2021-12-06 18:46:17,671 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 427 transitions. Word has length 55 [2021-12-06 18:46:17,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:17,672 INFO L470 AbstractCegarLoop]: Abstraction has 347 states and 427 transitions. [2021-12-06 18:46:17,672 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:46:17,672 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 427 transitions. [2021-12-06 18:46:17,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-06 18:46:17,673 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:17,673 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:17,673 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 18:46:17,673 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:17,673 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:17,673 INFO L85 PathProgramCache]: Analyzing trace with hash -1888946799, now seen corresponding path program 1 times [2021-12-06 18:46:17,673 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:17,674 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1407196909] [2021-12-06 18:46:17,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:17,674 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:17,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 18:46:17,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 18:46:17,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:46:17,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-06 18:46:17,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:17,722 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 18:46:17,722 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:17,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1407196909] [2021-12-06 18:46:17,723 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1407196909] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:17,723 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:46:17,723 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 18:46:17,723 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1962680188] [2021-12-06 18:46:17,723 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:17,723 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 18:46:17,723 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:17,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 18:46:17,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 18:46:17,724 INFO L87 Difference]: Start difference. First operand 347 states and 427 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 18:46:17,958 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:17,958 INFO L93 Difference]: Finished difference Result 1063 states and 1356 transitions. [2021-12-06 18:46:17,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-06 18:46:17,958 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2021-12-06 18:46:17,958 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:17,962 INFO L225 Difference]: With dead ends: 1063 [2021-12-06 18:46:17,962 INFO L226 Difference]: Without dead ends: 723 [2021-12-06 18:46:17,963 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-06 18:46:17,964 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 321 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 248 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 324 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:17,964 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [324 Valid, 279 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 248 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 18:46:17,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 723 states. [2021-12-06 18:46:17,993 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 723 to 721. [2021-12-06 18:46:17,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 721 states, 546 states have (on average 1.2106227106227105) internal successors, (661), 583 states have internal predecessors, (661), 90 states have call successors, (90), 84 states have call predecessors, (90), 84 states have return successors, (138), 88 states have call predecessors, (138), 90 states have call successors, (138) [2021-12-06 18:46:17,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 721 states to 721 states and 889 transitions. [2021-12-06 18:46:17,998 INFO L78 Accepts]: Start accepts. Automaton has 721 states and 889 transitions. Word has length 55 [2021-12-06 18:46:17,999 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:17,999 INFO L470 AbstractCegarLoop]: Abstraction has 721 states and 889 transitions. [2021-12-06 18:46:17,999 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 18:46:17,999 INFO L276 IsEmpty]: Start isEmpty. Operand 721 states and 889 transitions. [2021-12-06 18:46:18,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-12-06 18:46:18,000 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:18,000 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:18,000 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 18:46:18,001 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:18,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:18,001 INFO L85 PathProgramCache]: Analyzing trace with hash 625238315, now seen corresponding path program 1 times [2021-12-06 18:46:18,001 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:18,001 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [50549867] [2021-12-06 18:46:18,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:18,001 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:18,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:46:18,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-06 18:46:18,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 18:46:18,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:46:18,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 18:46:18,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,097 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-06 18:46:18,097 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:18,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [50549867] [2021-12-06 18:46:18,098 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [50549867] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 18:46:18,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1911411063] [2021-12-06 18:46:18,098 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:18,098 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 18:46:18,098 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 18:46:18,099 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 18:46:18,100 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 18:46:18,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,159 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 18:46:18,165 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 18:46:18,338 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:46:18,338 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 18:46:18,339 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1911411063] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:18,339 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 18:46:18,339 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-12-06 18:46:18,339 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [760417817] [2021-12-06 18:46:18,339 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:18,340 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 18:46:18,340 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:18,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 18:46:18,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-12-06 18:46:18,341 INFO L87 Difference]: Start difference. First operand 721 states and 889 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-06 18:46:18,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:18,456 INFO L93 Difference]: Finished difference Result 1414 states and 1750 transitions. [2021-12-06 18:46:18,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 18:46:18,457 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 59 [2021-12-06 18:46:18,458 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:18,462 INFO L225 Difference]: With dead ends: 1414 [2021-12-06 18:46:18,462 INFO L226 Difference]: Without dead ends: 700 [2021-12-06 18:46:18,465 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=227, Unknown=0, NotChecked=0, Total=272 [2021-12-06 18:46:18,465 INFO L933 BasicCegarLoop]: 189 mSDtfsCounter, 78 mSDsluCounter, 359 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 548 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:18,466 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 548 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:46:18,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 700 states. [2021-12-06 18:46:18,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 700 to 698. [2021-12-06 18:46:18,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 698 states, 528 states have (on average 1.1950757575757576) internal successors, (631), 564 states have internal predecessors, (631), 88 states have call successors, (88), 82 states have call predecessors, (88), 81 states have return successors, (121), 85 states have call predecessors, (121), 88 states have call successors, (121) [2021-12-06 18:46:18,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 698 states to 698 states and 840 transitions. [2021-12-06 18:46:18,512 INFO L78 Accepts]: Start accepts. Automaton has 698 states and 840 transitions. Word has length 59 [2021-12-06 18:46:18,512 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:18,512 INFO L470 AbstractCegarLoop]: Abstraction has 698 states and 840 transitions. [2021-12-06 18:46:18,513 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-06 18:46:18,513 INFO L276 IsEmpty]: Start isEmpty. Operand 698 states and 840 transitions. [2021-12-06 18:46:18,515 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-06 18:46:18,515 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:18,515 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:18,547 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 18:46:18,715 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-06 18:46:18,716 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:18,716 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:18,716 INFO L85 PathProgramCache]: Analyzing trace with hash 1670948605, now seen corresponding path program 1 times [2021-12-06 18:46:18,716 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:18,716 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106982854] [2021-12-06 18:46:18,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:18,716 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:18,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:46:18,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 18:46:18,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 18:46:18,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:46:18,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 18:46:18,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-06 18:46:18,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-06 18:46:18,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 18:46:18,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-12-06 18:46:18,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,849 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-06 18:46:18,850 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:18,850 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106982854] [2021-12-06 18:46:18,850 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106982854] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 18:46:18,850 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1380592941] [2021-12-06 18:46:18,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:18,850 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 18:46:18,850 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 18:46:18,851 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 18:46:18,852 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-06 18:46:18,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:18,920 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-06 18:46:18,923 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 18:46:19,053 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 18:46:19,053 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 18:46:19,053 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1380592941] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:19,053 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 18:46:19,054 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 10 [2021-12-06 18:46:19,054 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2102030205] [2021-12-06 18:46:19,054 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:19,054 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 18:46:19,054 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:19,054 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 18:46:19,055 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-06 18:46:19,055 INFO L87 Difference]: Start difference. First operand 698 states and 840 transitions. Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-06 18:46:19,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:19,189 INFO L93 Difference]: Finished difference Result 1799 states and 2265 transitions. [2021-12-06 18:46:19,189 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 18:46:19,190 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 98 [2021-12-06 18:46:19,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:19,196 INFO L225 Difference]: With dead ends: 1799 [2021-12-06 18:46:19,196 INFO L226 Difference]: Without dead ends: 1264 [2021-12-06 18:46:19,198 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 112 SyntacticMatches, 4 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2021-12-06 18:46:19,199 INFO L933 BasicCegarLoop]: 199 mSDtfsCounter, 180 mSDsluCounter, 567 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 766 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:19,199 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [183 Valid, 766 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:46:19,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1264 states. [2021-12-06 18:46:19,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1264 to 1050. [2021-12-06 18:46:19,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1050 states, 792 states have (on average 1.1944444444444444) internal successors, (946), 846 states have internal predecessors, (946), 134 states have call successors, (134), 116 states have call predecessors, (134), 123 states have return successors, (207), 129 states have call predecessors, (207), 134 states have call successors, (207) [2021-12-06 18:46:19,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1050 states to 1050 states and 1287 transitions. [2021-12-06 18:46:19,255 INFO L78 Accepts]: Start accepts. Automaton has 1050 states and 1287 transitions. Word has length 98 [2021-12-06 18:46:19,255 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:19,255 INFO L470 AbstractCegarLoop]: Abstraction has 1050 states and 1287 transitions. [2021-12-06 18:46:19,255 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-06 18:46:19,256 INFO L276 IsEmpty]: Start isEmpty. Operand 1050 states and 1287 transitions. [2021-12-06 18:46:19,257 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-06 18:46:19,257 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:46:19,257 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:19,291 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-06 18:46:19,458 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-06 18:46:19,459 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:46:19,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:46:19,460 INFO L85 PathProgramCache]: Analyzing trace with hash -134489729, now seen corresponding path program 1 times [2021-12-06 18:46:19,460 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:46:19,460 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1302152212] [2021-12-06 18:46:19,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:19,461 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:46:19,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:46:19,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 18:46:19,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 18:46:19,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:46:19,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 18:46:19,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-06 18:46:19,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-06 18:46:19,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 18:46:19,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-12-06 18:46:19,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,655 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2021-12-06 18:46:19,655 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:46:19,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1302152212] [2021-12-06 18:46:19,655 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1302152212] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 18:46:19,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [337941619] [2021-12-06 18:46:19,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:46:19,655 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 18:46:19,655 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 18:46:19,656 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 18:46:19,657 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-06 18:46:19,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:46:19,715 INFO L263 TraceCheckSpWp]: Trace formula consists of 473 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-06 18:46:19,718 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 18:46:19,818 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-06 18:46:19,819 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 18:46:19,819 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [337941619] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:46:19,819 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 18:46:19,819 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [11] total 14 [2021-12-06 18:46:19,819 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1781523449] [2021-12-06 18:46:19,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:46:19,819 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 18:46:19,820 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:46:19,820 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 18:46:19,820 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=30, Invalid=152, Unknown=0, NotChecked=0, Total=182 [2021-12-06 18:46:19,820 INFO L87 Difference]: Start difference. First operand 1050 states and 1287 transitions. Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 18:46:19,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:46:19,861 INFO L93 Difference]: Finished difference Result 1489 states and 1814 transitions. [2021-12-06 18:46:19,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 18:46:19,861 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2021-12-06 18:46:19,861 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:46:19,862 INFO L225 Difference]: With dead ends: 1489 [2021-12-06 18:46:19,862 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 18:46:19,865 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=195, Unknown=0, NotChecked=0, Total=240 [2021-12-06 18:46:19,865 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 33 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 18:46:19,866 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [33 Valid, 375 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 18:46:19,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 18:46:19,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 18:46:19,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 18:46:19,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 18:46:19,866 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 98 [2021-12-06 18:46:19,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:46:19,867 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 18:46:19,867 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 18:46:19,867 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 18:46:19,867 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 18:46:19,869 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 18:46:19,902 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-12-06 18:46:20,069 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-06 18:46:20,071 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 18:46:23,213 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 851 858) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2021-12-06 18:46:23,214 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 851 858) no Hoare annotation was computed. [2021-12-06 18:46:23,214 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 851 858) no Hoare annotation was computed. [2021-12-06 18:46:23,214 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 766 772) no Hoare annotation was computed. [2021-12-06 18:46:23,214 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 766 772) the Hoare annotation is: true [2021-12-06 18:46:23,214 INFO L858 garLoopResultBuilder]: For program point L190-1(lines 186 197) no Hoare annotation was computed. [2021-12-06 18:46:23,214 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 186 197) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse0 .cse2 .cse4 (= 0 ~systemActive~0)))) [2021-12-06 18:46:23,214 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 186 197) no Hoare annotation was computed. [2021-12-06 18:46:23,214 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 198 206) the Hoare annotation is: true [2021-12-06 18:46:23,214 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 198 206) no Hoare annotation was computed. [2021-12-06 18:46:23,214 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 198 206) no Hoare annotation was computed. [2021-12-06 18:46:23,214 INFO L854 garLoopResultBuilder]: At program point L271(line 271) the Hoare annotation is: (let ((.cse11 (= ~methaneLevelCritical~0 0)) (.cse10 (<= 2 ~waterLevel~0)) (.cse8 (= 0 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0))) (let ((.cse7 (and .cse3 (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1)) (<= 1 |timeShift_processEnvironment_~tmp~7#1|) (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0))) (.cse5 (and .cse11 .cse10 (not .cse8))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not .cse11)) (.cse4 (= ~waterLevel~0 1))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse0 .cse3 .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse6) (or .cse7 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse8 .cse9) (or .cse7 .cse5 .cse6 .cse8 .cse9) (or .cse0 .cse10 .cse6 .cse9) (or .cse0 .cse2 (and .cse3 .cse10) .cse9) (or .cse0 .cse1 .cse6 .cse4)))) [2021-12-06 18:46:23,215 INFO L858 garLoopResultBuilder]: For program point L271-1(line 271) no Hoare annotation was computed. [2021-12-06 18:46:23,215 INFO L858 garLoopResultBuilder]: For program point L746-1(lines 745 764) no Hoare annotation was computed. [2021-12-06 18:46:23,215 INFO L858 garLoopResultBuilder]: For program point L808(lines 808 816) no Hoare annotation was computed. [2021-12-06 18:46:23,215 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 742 765) no Hoare annotation was computed. [2021-12-06 18:46:23,215 INFO L858 garLoopResultBuilder]: For program point L804(lines 804 821) no Hoare annotation was computed. [2021-12-06 18:46:23,215 INFO L854 garLoopResultBuilder]: At program point L949(lines 934 952) the Hoare annotation is: (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1)) (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2 .cse3) (or .cse5 .cse6 .cse4) (or .cse5 .cse6 .cse0))) [2021-12-06 18:46:23,215 INFO L854 garLoopResultBuilder]: At program point L875(lines 870 878) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (and .cse1 .cse2 (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1)) (<= 1 |timeShift_processEnvironment_~tmp~7#1|) (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0)) .cse3 .cse4) (or .cse5 .cse6 (and .cse1 .cse2) .cse0) (or .cse5 (<= 2 ~waterLevel~0) .cse0 .cse4) (or .cse7 .cse3 .cse4) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or .cse5 .cse6 .cse7))) [2021-12-06 18:46:23,215 INFO L858 garLoopResultBuilder]: For program point L277(lines 277 283) no Hoare annotation was computed. [2021-12-06 18:46:23,215 INFO L858 garLoopResultBuilder]: For program point L661(line 661) no Hoare annotation was computed. [2021-12-06 18:46:23,215 INFO L858 garLoopResultBuilder]: For program point L273(lines 273 286) no Hoare annotation was computed. [2021-12-06 18:46:23,215 INFO L854 garLoopResultBuilder]: At program point L273-1(lines 265 289) the Hoare annotation is: (let ((.cse18 (= 0 ~systemActive~0)) (.cse8 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| 0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse19 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (and .cse8 .cse9)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= ~waterLevel~0 1)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (<= 0 |timeShift_isLowWaterSensorDry_#res#1|)) (.cse11 (<= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse12 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse13 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|)) (.cse14 (<= 1 ~waterLevel~0)) (.cse15 (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1))) (.cse16 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) (.cse20 (not .cse18)) (.cse17 (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse4 .cse6 .cse5) (or .cse0 .cse1 .cse6 .cse7) (or (and .cse8 .cse4) (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17) .cse2 .cse18 .cse5) (or .cse0 .cse9 .cse19 .cse6) (or .cse0 .cse19 .cse2 .cse3 .cse20) (or .cse0 .cse1 .cse2 .cse7) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse20) .cse6 .cse18 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse20 .cse17) .cse5)))) [2021-12-06 18:46:23,216 INFO L854 garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2021-12-06 18:46:23,216 INFO L854 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1)) (<= 1 |timeShift_processEnvironment_~tmp~7#1|) (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0))) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse3))) [2021-12-06 18:46:23,216 INFO L858 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2021-12-06 18:46:23,216 INFO L854 garLoopResultBuilder]: At program point L166-2(lines 162 173) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0) (or .cse6 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6))) [2021-12-06 18:46:23,216 INFO L854 garLoopResultBuilder]: At program point L662(lines 657 664) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2021-12-06 18:46:23,216 INFO L854 garLoopResultBuilder]: At program point L819(line 819) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse13 (= ~methaneLevelCritical~0 0)) (.cse12 (not .cse7))) (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (and .cse5 .cse3 .cse13 (<= 1 ~waterLevel~0) .cse12)) (.cse11 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse10 (not .cse13)) (.cse4 (= ~waterLevel~0 1))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or (and .cse5 .cse3 .cse6) .cse2 .cse7 .cse8) (or .cse9 .cse10 .cse7 .cse8) (or .cse0 .cse6 .cse10 .cse8) (or .cse9 .cse0 .cse11 .cse10) (or .cse0 .cse11 .cse2 .cse12) (or .cse0 .cse1 .cse10 .cse4))))) [2021-12-06 18:46:23,216 INFO L854 garLoopResultBuilder]: At program point L819-1(lines 800 824) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse13 (<= 2 ~waterLevel~0)) (.cse11 (not .cse8))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and .cse14 .cse13 .cse11)) (.cse10 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not .cse14)) (.cse5 (and .cse3 (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1)) (<= 1 |timeShift_processEnvironment_~tmp~7#1|) (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0))) (.cse12 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse13)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse10 .cse2 .cse11) (or .cse0 .cse6 .cse7 .cse9) (or .cse0 .cse12 .cse2 .cse9) (or .cse0 .cse1 .cse7 .cse4) (or .cse0 .cse6 .cse10 .cse7 (and .cse3 .cse11)) (or .cse5 .cse12 .cse2 .cse8 .cse9))))) [2021-12-06 18:46:23,216 INFO L858 garLoopResultBuilder]: For program point L753-1(lines 753 759) no Hoare annotation was computed. [2021-12-06 18:46:23,216 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 742 765) the Hoare annotation is: (let ((.cse9 (<= 2 ~waterLevel~0))) (let ((.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (= 0 ~systemActive~0)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse9 .cse6 .cse8) (or .cse0 .cse2 (and .cse3 .cse9) .cse8) (or .cse5 .cse2 .cse7 .cse8) (or .cse0 .cse1 .cse6 .cse4) (or .cse0 .cse3 (not (<= 1 |old(~waterLevel~0)|)) .cse6)))) [2021-12-06 18:46:23,216 INFO L858 garLoopResultBuilder]: For program point L943(lines 943 947) no Hoare annotation was computed. [2021-12-06 18:46:23,217 INFO L858 garLoopResultBuilder]: For program point L943-2(lines 943 947) no Hoare annotation was computed. [2021-12-06 18:46:23,217 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 742 765) no Hoare annotation was computed. [2021-12-06 18:46:23,217 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2021-12-06 18:46:23,217 INFO L854 garLoopResultBuilder]: At program point L258(lines 253 261) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0) (or .cse6 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6))) [2021-12-06 18:46:23,217 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-06 18:46:23,217 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-06 18:46:23,217 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-06 18:46:23,217 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-06 18:46:23,217 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-06 18:46:23,217 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-06 18:46:23,217 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-06 18:46:23,217 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-06 18:46:23,217 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-06 18:46:23,217 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-06 18:46:23,218 INFO L854 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2021-12-06 18:46:23,218 INFO L854 garLoopResultBuilder]: At program point L725(lines 678 727) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2021-12-06 18:46:23,218 INFO L858 garLoopResultBuilder]: For program point L688(lines 688 694) no Hoare annotation was computed. [2021-12-06 18:46:23,218 INFO L858 garLoopResultBuilder]: For program point L688-1(lines 688 694) no Hoare annotation was computed. [2021-12-06 18:46:23,218 INFO L854 garLoopResultBuilder]: At program point L973(lines 968 975) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse0 .cse1 .cse2 .cse4 (<= 1 ~waterLevel~0) .cse5) (and .cse7 .cse6 .cse1 .cse2 .cse4 (= ~waterLevel~0 1) .cse5))) [2021-12-06 18:46:23,218 INFO L858 garLoopResultBuilder]: For program point L680(lines 680 684) no Hoare annotation was computed. [2021-12-06 18:46:23,218 INFO L854 garLoopResultBuilder]: At program point L965(lines 953 967) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0) .cse5))) [2021-12-06 18:46:23,218 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 18:46:23,218 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 18:46:23,218 INFO L858 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2021-12-06 18:46:23,218 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 18:46:23,218 INFO L858 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2021-12-06 18:46:23,218 INFO L854 garLoopResultBuilder]: At program point L1007(lines 1002 1010) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 18:46:23,218 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2021-12-06 18:46:23,219 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2021-12-06 18:46:23,219 INFO L854 garLoopResultBuilder]: At program point L999(lines 995 1001) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 18:46:23,219 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 18:46:23,219 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2021-12-06 18:46:23,219 INFO L861 garLoopResultBuilder]: At program point L731(lines 668 735) the Hoare annotation is: true [2021-12-06 18:46:23,219 INFO L858 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2021-12-06 18:46:23,219 INFO L858 garLoopResultBuilder]: For program point L698-1(lines 698 704) no Hoare annotation was computed. [2021-12-06 18:46:23,219 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2021-12-06 18:46:23,219 INFO L854 garLoopResultBuilder]: At program point L690(line 690) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2021-12-06 18:46:23,219 INFO L854 garLoopResultBuilder]: At program point L992(lines 988 994) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 18:46:23,219 INFO L854 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2021-12-06 18:46:23,219 INFO L854 garLoopResultBuilder]: At program point L728(lines 677 729) the Hoare annotation is: false [2021-12-06 18:46:23,219 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 18:46:23,219 INFO L858 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2021-12-06 18:46:23,220 INFO L854 garLoopResultBuilder]: At program point L716-2(lines 708 723) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)) (and .cse1 .cse2 .cse3 .cse5 .cse4 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse4 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse7 .cse2 .cse3 .cse5 .cse4))) [2021-12-06 18:46:23,220 INFO L858 garLoopResultBuilder]: For program point L679(lines 678 727) no Hoare annotation was computed. [2021-12-06 18:46:23,220 INFO L858 garLoopResultBuilder]: For program point L708(lines 708 723) no Hoare annotation was computed. [2021-12-06 18:46:23,220 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 774 798) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 0)) .cse3))) [2021-12-06 18:46:23,220 INFO L854 garLoopResultBuilder]: At program point L830(lines 825 832) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-12-06 18:46:23,220 INFO L854 garLoopResultBuilder]: At program point L793(line 793) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-12-06 18:46:23,220 INFO L854 garLoopResultBuilder]: At program point L248(lines 239 252) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and .cse5 (<= 2 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse5))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3 .cse4)))) [2021-12-06 18:46:23,220 INFO L858 garLoopResultBuilder]: For program point L793-1(lines 774 798) no Hoare annotation was computed. [2021-12-06 18:46:23,220 INFO L858 garLoopResultBuilder]: For program point L841(lines 841 847) no Hoare annotation was computed. [2021-12-06 18:46:23,220 INFO L854 garLoopResultBuilder]: At program point L841-2(lines 834 850) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or .cse1 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|) (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) (not (<= 2 ~waterLevel~0)) .cse3 .cse2))) [2021-12-06 18:46:23,220 INFO L854 garLoopResultBuilder]: At program point L930(lines 915 933) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and .cse5 (<= 2 ~waterLevel~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3 .cse4)))) [2021-12-06 18:46:23,221 INFO L854 garLoopResultBuilder]: At program point L866(lines 859 869) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (and .cse2 .cse3) .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))))) [2021-12-06 18:46:23,221 INFO L854 garLoopResultBuilder]: At program point L864(line 864) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3))) [2021-12-06 18:46:23,221 INFO L858 garLoopResultBuilder]: For program point L864-1(line 864) no Hoare annotation was computed. [2021-12-06 18:46:23,221 INFO L858 garLoopResultBuilder]: For program point L924(lines 924 928) no Hoare annotation was computed. [2021-12-06 18:46:23,221 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 774 798) no Hoare annotation was computed. [2021-12-06 18:46:23,221 INFO L858 garLoopResultBuilder]: For program point L924-2(lines 924 928) no Hoare annotation was computed. [2021-12-06 18:46:23,221 INFO L854 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5 (not .cse3))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 2 ~waterLevel~0)) .cse1 .cse2 .cse3) (or (and .cse4 .cse5) .cse0 (not (<= 1 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 0)) .cse3)))) [2021-12-06 18:46:23,221 INFO L858 garLoopResultBuilder]: For program point L243(lines 243 249) no Hoare annotation was computed. [2021-12-06 18:46:23,221 INFO L858 garLoopResultBuilder]: For program point L782(lines 782 790) no Hoare annotation was computed. [2021-12-06 18:46:23,221 INFO L858 garLoopResultBuilder]: For program point L778(lines 778 795) no Hoare annotation was computed. [2021-12-06 18:46:23,221 INFO L858 garLoopResultBuilder]: For program point L178-1(lines 174 185) no Hoare annotation was computed. [2021-12-06 18:46:23,221 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 174 185) no Hoare annotation was computed. [2021-12-06 18:46:23,221 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 174 185) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (= ~waterLevel~0 1)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse2 (= 0 ~systemActive~0) .cse6) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 .cse5 .cse2 .cse6))) [2021-12-06 18:46:23,224 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:46:23,225 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 18:46:23,250 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 06:46:23 BoogieIcfgContainer [2021-12-06 18:46:23,250 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 18:46:23,250 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 18:46:23,250 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 18:46:23,250 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 18:46:23,251 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 06:46:15" (3/4) ... [2021-12-06 18:46:23,253 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 18:46:23,258 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-06 18:46:23,258 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 18:46:23,258 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 18:46:23,258 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-06 18:46:23,258 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 18:46:23,258 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 18:46:23,258 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 18:46:23,258 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 18:46:23,264 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-06 18:46:23,265 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 18:46:23,265 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 18:46:23,266 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 18:46:23,266 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 18:46:23,267 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 18:46:23,267 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 18:46:23,283 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 18:46:23,283 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 18:46:23,284 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) [2021-12-06 18:46:23,284 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2021-12-06 18:46:23,285 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) && ((((((((((((pumpRunning == 0 && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && tmp <= 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && !(0 == systemActive)))) && ((((((((((((pumpRunning == 0 && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && tmp <= 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2021-12-06 18:46:23,285 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0)) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((((tmp == 0 && 2 <= waterLevel) || (((((((((tmp == 0 && pumpRunning == 0) && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && tmp <= 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((((((((pumpRunning == 0 && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && !(0 == systemActive)) && tmp <= 0)) || !(2 <= \old(waterLevel))) [2021-12-06 18:46:23,285 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) [2021-12-06 18:46:23,286 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) [2021-12-06 18:46:23,286 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) [2021-12-06 18:46:23,286 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((((pumpRunning == 0 && \result == 0) && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && tmp <= 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2021-12-06 18:46:23,286 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || (((pumpRunning == \old(pumpRunning) && 0 <= \result) && \result <= 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (((pumpRunning == \old(pumpRunning) && 0 <= \result) && \result <= 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2021-12-06 18:46:23,286 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((methaneLevelCritical <= tmp && pumpRunning == 0) && methaneLevelCritical <= \result)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2021-12-06 18:46:23,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) [2021-12-06 18:46:23,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-06 18:46:23,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2021-12-06 18:46:23,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) || (((((((pumpRunning == \old(pumpRunning) && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && tmp <= 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(1 <= methaneLevelCritical) || (((((((pumpRunning == \old(pumpRunning) && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && tmp <= 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2021-12-06 18:46:23,287 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) [2021-12-06 18:46:23,314 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 18:46:23,314 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 18:46:23,315 INFO L158 Benchmark]: Toolchain (without parser) took 8126.64ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 71.7MB in the beginning and 111.4MB in the end (delta: -39.7MB). Peak memory consumption was 10.1MB. Max. memory is 16.1GB. [2021-12-06 18:46:23,315 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 111.1MB. Free memory is still 88.9MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 18:46:23,315 INFO L158 Benchmark]: CACSL2BoogieTranslator took 315.58ms. Allocated memory is still 111.1MB. Free memory was 71.5MB in the beginning and 79.1MB in the end (delta: -7.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-12-06 18:46:23,316 INFO L158 Benchmark]: Boogie Procedure Inliner took 38.66ms. Allocated memory is still 111.1MB. Free memory was 79.1MB in the beginning and 76.5MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 18:46:23,316 INFO L158 Benchmark]: Boogie Preprocessor took 21.84ms. Allocated memory is still 111.1MB. Free memory was 76.5MB in the beginning and 74.9MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 18:46:23,317 INFO L158 Benchmark]: RCFGBuilder took 362.78ms. Allocated memory is still 111.1MB. Free memory was 74.9MB in the beginning and 58.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-06 18:46:23,317 INFO L158 Benchmark]: TraceAbstraction took 7318.78ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 57.6MB in the beginning and 118.7MB in the end (delta: -61.1MB). Peak memory consumption was 72.6MB. Max. memory is 16.1GB. [2021-12-06 18:46:23,317 INFO L158 Benchmark]: Witness Printer took 63.92ms. Allocated memory is still 161.5MB. Free memory was 118.7MB in the beginning and 111.4MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-06 18:46:23,319 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 111.1MB. Free memory is still 88.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 315.58ms. Allocated memory is still 111.1MB. Free memory was 71.5MB in the beginning and 79.1MB in the end (delta: -7.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 38.66ms. Allocated memory is still 111.1MB. Free memory was 79.1MB in the beginning and 76.5MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 21.84ms. Allocated memory is still 111.1MB. Free memory was 76.5MB in the beginning and 74.9MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 362.78ms. Allocated memory is still 111.1MB. Free memory was 74.9MB in the beginning and 58.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 7318.78ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 57.6MB in the beginning and 118.7MB in the end (delta: -61.1MB). Peak memory consumption was 72.6MB. Max. memory is 16.1GB. * Witness Printer took 63.92ms. Allocated memory is still 161.5MB. Free memory was 118.7MB in the beginning and 111.4MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1451 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1425 mSDsluCounter, 4077 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2610 mSDsCounter, 377 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1307 IncrementalHoareTripleChecker+Invalid, 1684 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 377 mSolverCounterUnsat, 1467 mSDtfsCounter, 1307 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 452 GetRequests, 352 SyntacticMatches, 4 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 73 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1050occurred in iteration=11, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 270 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 2151 PreInvPairs, 2357 NumberOfFragments, 2815 HoareAnnotationTreeSize, 2151 FomulaSimplifications, 336 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 46 FomulaSimplificationsInter, 9317 FormulaSimplificationTreeSizeReductionInter, 2.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 877 NumberOfCodeBlocks, 877 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 862 ConstructedInterpolants, 0 QuantifiedInterpolants, 1469 SizeOfPredicates, 12 NumberOfNonLiveVariables, 1323 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 136/142 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 953]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((((((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((((pumpRunning == 0 && \result == 0) && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && tmp <= 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) || (((((((pumpRunning == \old(pumpRunning) && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && tmp <= 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(1 <= methaneLevelCritical) || (((((((pumpRunning == \old(pumpRunning) && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && tmp <= 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || (((pumpRunning == \old(pumpRunning) && 0 <= \result) && \result <= 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (((pumpRunning == \old(pumpRunning) && 0 <= \result) && \result <= 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((methaneLevelCritical <= tmp && pumpRunning == 0) && methaneLevelCritical <= \result)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0)) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((((tmp == 0 && 2 <= waterLevel) || (((((((((tmp == 0 && pumpRunning == 0) && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && tmp <= 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((((((((pumpRunning == 0 && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && !(0 == systemActive)) && tmp <= 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) && ((((((((((((pumpRunning == 0 && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && tmp <= 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && !(0 == systemActive)))) && ((((((((((((pumpRunning == 0 && 0 <= \result) && \result <= 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && 0 < tmp + 1) && 1 <= tmp) && tmp <= 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2021-12-06 18:46:23,361 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cd66c7ac-4fe1-4d67-9b8e-45cc33f1ff10/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE