./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 685bdac90b32b89d64927338575dc6f79737e9f84bb9272d4bfb0c942aa4ae35 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 21:03:46,960 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 21:03:46,961 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 21:03:46,983 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 21:03:46,984 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 21:03:46,984 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 21:03:46,986 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 21:03:46,987 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 21:03:46,989 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 21:03:46,990 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 21:03:46,990 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 21:03:46,991 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 21:03:46,992 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 21:03:46,993 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 21:03:46,994 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 21:03:46,995 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 21:03:46,996 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 21:03:46,997 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 21:03:46,998 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 21:03:47,000 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 21:03:47,002 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 21:03:47,003 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 21:03:47,004 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 21:03:47,005 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 21:03:47,008 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 21:03:47,008 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 21:03:47,008 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 21:03:47,009 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 21:03:47,010 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 21:03:47,010 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 21:03:47,011 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 21:03:47,011 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 21:03:47,012 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 21:03:47,013 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 21:03:47,014 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 21:03:47,014 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 21:03:47,015 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 21:03:47,015 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 21:03:47,015 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 21:03:47,016 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 21:03:47,016 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 21:03:47,017 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 21:03:47,041 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 21:03:47,041 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 21:03:47,041 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 21:03:47,041 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 21:03:47,042 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 21:03:47,042 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 21:03:47,043 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 21:03:47,043 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 21:03:47,043 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 21:03:47,043 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 21:03:47,044 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 21:03:47,044 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 21:03:47,044 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 21:03:47,044 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 21:03:47,044 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 21:03:47,044 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 21:03:47,045 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 21:03:47,045 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 21:03:47,045 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 21:03:47,045 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 21:03:47,045 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 21:03:47,046 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 21:03:47,046 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 21:03:47,046 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 21:03:47,046 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 21:03:47,046 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 21:03:47,046 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 21:03:47,047 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 21:03:47,047 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 21:03:47,047 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 21:03:47,047 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 21:03:47,047 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 21:03:47,047 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 21:03:47,048 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 21:03:47,048 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 685bdac90b32b89d64927338575dc6f79737e9f84bb9272d4bfb0c942aa4ae35 [2021-12-06 21:03:47,225 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 21:03:47,240 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 21:03:47,242 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 21:03:47,243 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 21:03:47,243 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 21:03:47,244 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c [2021-12-06 21:03:47,288 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/data/332e50592/0a84cb4245e541aea678f0e0ad590be4/FLAG307226ae6 [2021-12-06 21:03:47,699 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 21:03:47,699 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c [2021-12-06 21:03:47,709 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/data/332e50592/0a84cb4245e541aea678f0e0ad590be4/FLAG307226ae6 [2021-12-06 21:03:47,722 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/data/332e50592/0a84cb4245e541aea678f0e0ad590be4 [2021-12-06 21:03:47,724 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 21:03:47,726 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 21:03:47,727 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 21:03:47,728 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 21:03:47,730 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 21:03:47,731 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 09:03:47" (1/1) ... [2021-12-06 21:03:47,732 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@71a26d6e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:47, skipping insertion in model container [2021-12-06 21:03:47,732 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 09:03:47" (1/1) ... [2021-12-06 21:03:47,737 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 21:03:47,770 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 21:03:47,985 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c[19412,19425] [2021-12-06 21:03:47,988 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 21:03:47,997 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 21:03:48,050 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c[19412,19425] [2021-12-06 21:03:48,050 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 21:03:48,063 INFO L208 MainTranslator]: Completed translation [2021-12-06 21:03:48,063 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48 WrapperNode [2021-12-06 21:03:48,063 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 21:03:48,064 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 21:03:48,064 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 21:03:48,064 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 21:03:48,070 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,081 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,102 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 282 [2021-12-06 21:03:48,102 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 21:03:48,103 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 21:03:48,103 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 21:03:48,103 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 21:03:48,109 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,110 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,112 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,112 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,117 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,121 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,123 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,126 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 21:03:48,126 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 21:03:48,126 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 21:03:48,126 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 21:03:48,127 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (1/1) ... [2021-12-06 21:03:48,135 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 21:03:48,146 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 21:03:48,157 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 21:03:48,159 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 21:03:48,186 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 21:03:48,186 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 21:03:48,186 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 21:03:48,187 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 21:03:48,187 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 21:03:48,187 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 21:03:48,187 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 21:03:48,187 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-06 21:03:48,187 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-06 21:03:48,187 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 21:03:48,187 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 21:03:48,187 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 21:03:48,187 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 21:03:48,187 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-06 21:03:48,188 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-06 21:03:48,188 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-06 21:03:48,188 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-06 21:03:48,188 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 21:03:48,188 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 21:03:48,188 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 21:03:48,188 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 21:03:48,188 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 21:03:48,252 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 21:03:48,253 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 21:03:48,500 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 21:03:48,506 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 21:03:48,506 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 21:03:48,507 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 09:03:48 BoogieIcfgContainer [2021-12-06 21:03:48,507 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 21:03:48,509 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 21:03:48,509 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 21:03:48,511 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 21:03:48,511 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 09:03:47" (1/3) ... [2021-12-06 21:03:48,512 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4253e701 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 09:03:48, skipping insertion in model container [2021-12-06 21:03:48,512 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:03:48" (2/3) ... [2021-12-06 21:03:48,512 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4253e701 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 09:03:48, skipping insertion in model container [2021-12-06 21:03:48,512 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 09:03:48" (3/3) ... [2021-12-06 21:03:48,513 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product55.cil.c [2021-12-06 21:03:48,517 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 21:03:48,517 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 21:03:48,551 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 21:03:48,556 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 21:03:48,556 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 21:03:48,570 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 78 states have (on average 1.3846153846153846) internal successors, (108), 89 states have internal predecessors, (108), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-06 21:03:48,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-06 21:03:48,576 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:48,576 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:48,577 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:48,580 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:48,581 INFO L85 PathProgramCache]: Analyzing trace with hash -898586634, now seen corresponding path program 1 times [2021-12-06 21:03:48,587 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:48,587 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [380955928] [2021-12-06 21:03:48,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:48,588 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:48,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:48,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-06 21:03:48,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:48,737 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:48,738 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:48,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [380955928] [2021-12-06 21:03:48,739 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [380955928] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:48,739 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:03:48,739 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 21:03:48,740 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1068795932] [2021-12-06 21:03:48,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:48,744 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 21:03:48,744 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:48,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 21:03:48,767 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 21:03:48,769 INFO L87 Difference]: Start difference. First operand has 106 states, 78 states have (on average 1.3846153846153846) internal successors, (108), 89 states have internal predecessors, (108), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:03:48,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:48,801 INFO L93 Difference]: Finished difference Result 203 states and 278 transitions. [2021-12-06 21:03:48,802 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 21:03:48,803 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-06 21:03:48,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:48,810 INFO L225 Difference]: With dead ends: 203 [2021-12-06 21:03:48,810 INFO L226 Difference]: Without dead ends: 97 [2021-12-06 21:03:48,814 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 21:03:48,817 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 136 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:48,817 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 21:03:48,829 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2021-12-06 21:03:48,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2021-12-06 21:03:48,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-06 21:03:48,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 127 transitions. [2021-12-06 21:03:48,859 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 127 transitions. Word has length 25 [2021-12-06 21:03:48,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:48,860 INFO L470 AbstractCegarLoop]: Abstraction has 97 states and 127 transitions. [2021-12-06 21:03:48,860 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:03:48,860 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 127 transitions. [2021-12-06 21:03:48,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-06 21:03:48,863 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:48,864 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:48,864 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 21:03:48,864 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:48,865 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:48,865 INFO L85 PathProgramCache]: Analyzing trace with hash 1844424780, now seen corresponding path program 1 times [2021-12-06 21:03:48,865 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:48,866 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1672799669] [2021-12-06 21:03:48,866 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:48,866 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:48,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:48,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 21:03:48,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:48,927 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:48,928 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:48,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1672799669] [2021-12-06 21:03:48,928 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1672799669] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:48,928 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:03:48,929 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 21:03:48,929 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1876039513] [2021-12-06 21:03:48,929 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:48,930 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 21:03:48,930 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:48,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 21:03:48,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 21:03:48,931 INFO L87 Difference]: Start difference. First operand 97 states and 127 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:03:48,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:48,951 INFO L93 Difference]: Finished difference Result 155 states and 203 transitions. [2021-12-06 21:03:48,952 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 21:03:48,952 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-06 21:03:48,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:48,954 INFO L225 Difference]: With dead ends: 155 [2021-12-06 21:03:48,954 INFO L226 Difference]: Without dead ends: 88 [2021-12-06 21:03:48,956 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 21:03:48,957 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 16 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:48,958 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 207 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 21:03:48,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2021-12-06 21:03:48,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2021-12-06 21:03:48,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 65 states have (on average 1.3384615384615384) internal successors, (87), 75 states have internal predecessors, (87), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-06 21:03:48,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 115 transitions. [2021-12-06 21:03:48,972 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 115 transitions. Word has length 26 [2021-12-06 21:03:48,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:48,973 INFO L470 AbstractCegarLoop]: Abstraction has 88 states and 115 transitions. [2021-12-06 21:03:48,973 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:03:48,973 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 115 transitions. [2021-12-06 21:03:48,975 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-06 21:03:48,975 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:48,975 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:48,975 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 21:03:48,975 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:48,976 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:48,976 INFO L85 PathProgramCache]: Analyzing trace with hash 1100480442, now seen corresponding path program 1 times [2021-12-06 21:03:48,976 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:48,977 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [755839023] [2021-12-06 21:03:48,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:48,977 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:49,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 21:03:49,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,045 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:49,045 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:49,045 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [755839023] [2021-12-06 21:03:49,045 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [755839023] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:49,045 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:03:49,045 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 21:03:49,045 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [624860119] [2021-12-06 21:03:49,045 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:49,046 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 21:03:49,046 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:49,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 21:03:49,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-06 21:03:49,047 INFO L87 Difference]: Start difference. First operand 88 states and 115 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:03:49,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:49,207 INFO L93 Difference]: Finished difference Result 290 states and 386 transitions. [2021-12-06 21:03:49,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 21:03:49,208 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-06 21:03:49,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:49,211 INFO L225 Difference]: With dead ends: 290 [2021-12-06 21:03:49,211 INFO L226 Difference]: Without dead ends: 210 [2021-12-06 21:03:49,213 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 21:03:49,214 INFO L933 BasicCegarLoop]: 141 mSDtfsCounter, 238 mSDsluCounter, 399 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 540 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:49,215 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [238 Valid, 540 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 21:03:49,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2021-12-06 21:03:49,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 204. [2021-12-06 21:03:49,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 149 states have (on average 1.3691275167785235) internal successors, (204), 171 states have internal predecessors, (204), 33 states have call successors, (33), 21 states have call predecessors, (33), 21 states have return successors, (34), 21 states have call predecessors, (34), 33 states have call successors, (34) [2021-12-06 21:03:49,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 271 transitions. [2021-12-06 21:03:49,247 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 271 transitions. Word has length 30 [2021-12-06 21:03:49,248 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:49,248 INFO L470 AbstractCegarLoop]: Abstraction has 204 states and 271 transitions. [2021-12-06 21:03:49,248 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:03:49,248 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 271 transitions. [2021-12-06 21:03:49,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-06 21:03:49,251 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:49,251 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:49,251 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 21:03:49,251 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:49,252 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:49,252 INFO L85 PathProgramCache]: Analyzing trace with hash -1086931004, now seen corresponding path program 1 times [2021-12-06 21:03:49,252 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:49,253 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1739493813] [2021-12-06 21:03:49,253 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:49,253 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:49,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 21:03:49,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,326 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:49,327 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:49,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1739493813] [2021-12-06 21:03:49,327 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1739493813] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:49,327 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:03:49,327 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 21:03:49,328 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1150276736] [2021-12-06 21:03:49,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:49,328 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 21:03:49,328 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:49,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 21:03:49,329 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 21:03:49,329 INFO L87 Difference]: Start difference. First operand 204 states and 271 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:03:49,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:49,415 INFO L93 Difference]: Finished difference Result 594 states and 801 transitions. [2021-12-06 21:03:49,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 21:03:49,415 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-06 21:03:49,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:49,420 INFO L225 Difference]: With dead ends: 594 [2021-12-06 21:03:49,420 INFO L226 Difference]: Without dead ends: 398 [2021-12-06 21:03:49,423 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-06 21:03:49,424 INFO L933 BasicCegarLoop]: 126 mSDtfsCounter, 83 mSDsluCounter, 443 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 569 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:49,425 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [86 Valid, 569 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 21:03:49,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398 states. [2021-12-06 21:03:49,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398 to 389. [2021-12-06 21:03:49,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 389 states, 280 states have (on average 1.35) internal successors, (378), 323 states have internal predecessors, (378), 66 states have call successors, (66), 42 states have call predecessors, (66), 42 states have return successors, (71), 42 states have call predecessors, (71), 66 states have call successors, (71) [2021-12-06 21:03:49,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 389 states to 389 states and 515 transitions. [2021-12-06 21:03:49,469 INFO L78 Accepts]: Start accepts. Automaton has 389 states and 515 transitions. Word has length 34 [2021-12-06 21:03:49,470 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:49,470 INFO L470 AbstractCegarLoop]: Abstraction has 389 states and 515 transitions. [2021-12-06 21:03:49,470 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:03:49,470 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 515 transitions. [2021-12-06 21:03:49,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-06 21:03:49,473 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:49,473 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:49,473 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 21:03:49,473 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:49,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:49,474 INFO L85 PathProgramCache]: Analyzing trace with hash -2070630656, now seen corresponding path program 1 times [2021-12-06 21:03:49,474 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:49,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [90959395] [2021-12-06 21:03:49,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:49,475 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:49,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 21:03:49,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 21:03:49,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:49,537 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:49,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [90959395] [2021-12-06 21:03:49,537 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [90959395] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:49,537 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:03:49,537 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 21:03:49,537 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1303134002] [2021-12-06 21:03:49,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:49,538 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 21:03:49,538 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:49,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 21:03:49,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 21:03:49,539 INFO L87 Difference]: Start difference. First operand 389 states and 515 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 21:03:49,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:49,761 INFO L93 Difference]: Finished difference Result 948 states and 1289 transitions. [2021-12-06 21:03:49,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 21:03:49,762 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-12-06 21:03:49,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:49,767 INFO L225 Difference]: With dead ends: 948 [2021-12-06 21:03:49,767 INFO L226 Difference]: Without dead ends: 567 [2021-12-06 21:03:49,769 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 21:03:49,770 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 126 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 252 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 301 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 252 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:49,771 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [135 Valid, 260 Invalid, 301 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 252 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 21:03:49,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 567 states. [2021-12-06 21:03:49,813 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 567 to 548. [2021-12-06 21:03:49,814 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 548 states, 399 states have (on average 1.2857142857142858) internal successors, (513), 436 states have internal predecessors, (513), 80 states have call successors, (80), 68 states have call predecessors, (80), 68 states have return successors, (113), 70 states have call predecessors, (113), 80 states have call successors, (113) [2021-12-06 21:03:49,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 548 states to 548 states and 706 transitions. [2021-12-06 21:03:49,820 INFO L78 Accepts]: Start accepts. Automaton has 548 states and 706 transitions. Word has length 38 [2021-12-06 21:03:49,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:49,821 INFO L470 AbstractCegarLoop]: Abstraction has 548 states and 706 transitions. [2021-12-06 21:03:49,821 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 21:03:49,821 INFO L276 IsEmpty]: Start isEmpty. Operand 548 states and 706 transitions. [2021-12-06 21:03:49,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-12-06 21:03:49,824 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:49,824 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:49,824 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 21:03:49,824 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:49,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:49,825 INFO L85 PathProgramCache]: Analyzing trace with hash 1021483760, now seen corresponding path program 1 times [2021-12-06 21:03:49,825 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:49,825 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1973340747] [2021-12-06 21:03:49,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:49,826 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:49,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 21:03:49,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 21:03:49,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:49,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-06 21:03:49,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:49,904 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:49,904 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:49,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1973340747] [2021-12-06 21:03:49,904 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1973340747] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:49,905 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:03:49,905 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 21:03:49,905 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [763401778] [2021-12-06 21:03:49,905 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:49,905 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 21:03:49,906 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:49,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 21:03:49,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 21:03:49,907 INFO L87 Difference]: Start difference. First operand 548 states and 706 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 21:03:50,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:50,115 INFO L93 Difference]: Finished difference Result 1212 states and 1581 transitions. [2021-12-06 21:03:50,115 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 21:03:50,116 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2021-12-06 21:03:50,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:50,121 INFO L225 Difference]: With dead ends: 1212 [2021-12-06 21:03:50,121 INFO L226 Difference]: Without dead ends: 672 [2021-12-06 21:03:50,123 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-06 21:03:50,124 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 139 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 319 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 319 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:50,125 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [140 Valid, 275 Invalid, 377 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 319 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 21:03:50,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 672 states. [2021-12-06 21:03:50,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 672 to 658. [2021-12-06 21:03:50,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 658 states, 481 states have (on average 1.2536382536382535) internal successors, (603), 518 states have internal predecessors, (603), 88 states have call successors, (88), 68 states have call predecessors, (88), 88 states have return successors, (141), 94 states have call predecessors, (141), 88 states have call successors, (141) [2021-12-06 21:03:50,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 658 states to 658 states and 832 transitions. [2021-12-06 21:03:50,172 INFO L78 Accepts]: Start accepts. Automaton has 658 states and 832 transitions. Word has length 53 [2021-12-06 21:03:50,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:50,172 INFO L470 AbstractCegarLoop]: Abstraction has 658 states and 832 transitions. [2021-12-06 21:03:50,172 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 21:03:50,172 INFO L276 IsEmpty]: Start isEmpty. Operand 658 states and 832 transitions. [2021-12-06 21:03:50,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-12-06 21:03:50,174 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:50,174 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:50,174 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 21:03:50,174 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:50,174 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:50,174 INFO L85 PathProgramCache]: Analyzing trace with hash 1444185586, now seen corresponding path program 1 times [2021-12-06 21:03:50,174 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:50,175 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [161966515] [2021-12-06 21:03:50,175 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:50,175 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:50,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 21:03:50,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 21:03:50,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:50,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-06 21:03:50,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,240 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:50,241 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:50,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [161966515] [2021-12-06 21:03:50,241 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [161966515] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:50,241 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:03:50,241 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 21:03:50,241 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [91303009] [2021-12-06 21:03:50,241 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:50,242 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 21:03:50,242 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:50,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 21:03:50,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-06 21:03:50,242 INFO L87 Difference]: Start difference. First operand 658 states and 832 transitions. Second operand has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 21:03:50,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:50,487 INFO L93 Difference]: Finished difference Result 1354 states and 1773 transitions. [2021-12-06 21:03:50,487 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 21:03:50,487 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2021-12-06 21:03:50,487 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:50,491 INFO L225 Difference]: With dead ends: 1354 [2021-12-06 21:03:50,491 INFO L226 Difference]: Without dead ends: 704 [2021-12-06 21:03:50,493 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2021-12-06 21:03:50,494 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 195 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 422 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 257 SdHoareTripleChecker+Invalid, 494 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 422 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:50,494 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [196 Valid, 257 Invalid, 494 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 422 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 21:03:50,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 704 states. [2021-12-06 21:03:50,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 704 to 666. [2021-12-06 21:03:50,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 666 states, 489 states have (on average 1.2494887525562373) internal successors, (611), 526 states have internal predecessors, (611), 88 states have call successors, (88), 68 states have call predecessors, (88), 88 states have return successors, (141), 94 states have call predecessors, (141), 88 states have call successors, (141) [2021-12-06 21:03:50,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 666 states to 666 states and 840 transitions. [2021-12-06 21:03:50,534 INFO L78 Accepts]: Start accepts. Automaton has 666 states and 840 transitions. Word has length 53 [2021-12-06 21:03:50,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:50,534 INFO L470 AbstractCegarLoop]: Abstraction has 666 states and 840 transitions. [2021-12-06 21:03:50,534 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 21:03:50,534 INFO L276 IsEmpty]: Start isEmpty. Operand 666 states and 840 transitions. [2021-12-06 21:03:50,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-12-06 21:03:50,535 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:50,535 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:50,535 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 21:03:50,535 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:50,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:50,536 INFO L85 PathProgramCache]: Analyzing trace with hash -361252748, now seen corresponding path program 1 times [2021-12-06 21:03:50,536 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:50,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [269962798] [2021-12-06 21:03:50,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:50,536 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:50,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 21:03:50,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 21:03:50,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:50,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-06 21:03:50,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:50,595 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:50,595 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:50,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [269962798] [2021-12-06 21:03:50,595 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [269962798] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:50,595 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:03:50,596 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 21:03:50,596 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [450202143] [2021-12-06 21:03:50,596 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:50,596 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 21:03:50,596 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:50,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 21:03:50,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 21:03:50,597 INFO L87 Difference]: Start difference. First operand 666 states and 840 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 21:03:50,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:50,886 INFO L93 Difference]: Finished difference Result 1970 states and 2593 transitions. [2021-12-06 21:03:50,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-06 21:03:50,886 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 53 [2021-12-06 21:03:50,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:50,896 INFO L225 Difference]: With dead ends: 1970 [2021-12-06 21:03:50,896 INFO L226 Difference]: Without dead ends: 1312 [2021-12-06 21:03:50,899 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-06 21:03:50,900 INFO L933 BasicCegarLoop]: 149 mSDtfsCounter, 347 mSDsluCounter, 146 mSDsCounter, 0 mSdLazyCounter, 301 mSolverCounterSat, 146 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 447 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 146 IncrementalHoareTripleChecker+Valid, 301 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:50,900 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [350 Valid, 295 Invalid, 447 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [146 Valid, 301 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 21:03:50,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1312 states. [2021-12-06 21:03:50,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1312 to 1300. [2021-12-06 21:03:50,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1300 states, 957 states have (on average 1.219435736677116) internal successors, (1167), 1018 states have internal predecessors, (1167), 174 states have call successors, (174), 158 states have call predecessors, (174), 168 states have return successors, (305), 174 states have call predecessors, (305), 174 states have call successors, (305) [2021-12-06 21:03:50,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1300 states to 1300 states and 1646 transitions. [2021-12-06 21:03:50,985 INFO L78 Accepts]: Start accepts. Automaton has 1300 states and 1646 transitions. Word has length 53 [2021-12-06 21:03:50,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:50,986 INFO L470 AbstractCegarLoop]: Abstraction has 1300 states and 1646 transitions. [2021-12-06 21:03:50,986 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 21:03:50,986 INFO L276 IsEmpty]: Start isEmpty. Operand 1300 states and 1646 transitions. [2021-12-06 21:03:50,987 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-06 21:03:50,987 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:50,987 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:50,988 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 21:03:50,988 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:50,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:50,988 INFO L85 PathProgramCache]: Analyzing trace with hash 1451480602, now seen corresponding path program 1 times [2021-12-06 21:03:50,988 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:50,988 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1772498313] [2021-12-06 21:03:50,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:50,988 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:50,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 21:03:51,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 21:03:51,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 21:03:51,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:51,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-06 21:03:51,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,038 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:51,038 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:51,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1772498313] [2021-12-06 21:03:51,038 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1772498313] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:51,039 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:03:51,039 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 21:03:51,039 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2143835687] [2021-12-06 21:03:51,039 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:51,039 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 21:03:51,039 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:51,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 21:03:51,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 21:03:51,040 INFO L87 Difference]: Start difference. First operand 1300 states and 1646 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 21:03:51,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:51,404 INFO L93 Difference]: Finished difference Result 2414 states and 3206 transitions. [2021-12-06 21:03:51,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 21:03:51,405 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 57 [2021-12-06 21:03:51,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:51,421 INFO L225 Difference]: With dead ends: 2414 [2021-12-06 21:03:51,422 INFO L226 Difference]: Without dead ends: 2412 [2021-12-06 21:03:51,423 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-12-06 21:03:51,424 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 479 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 278 mSolverCounterSat, 252 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 481 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 530 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 252 IncrementalHoareTripleChecker+Valid, 278 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:51,425 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [481 Valid, 224 Invalid, 530 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [252 Valid, 278 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 21:03:51,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2412 states. [2021-12-06 21:03:51,523 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2412 to 1891. [2021-12-06 21:03:51,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1891 states, 1386 states have (on average 1.22005772005772) internal successors, (1691), 1494 states have internal predecessors, (1691), 263 states have call successors, (263), 197 states have call predecessors, (263), 241 states have return successors, (549), 260 states have call predecessors, (549), 263 states have call successors, (549) [2021-12-06 21:03:51,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1891 states to 1891 states and 2503 transitions. [2021-12-06 21:03:51,535 INFO L78 Accepts]: Start accepts. Automaton has 1891 states and 2503 transitions. Word has length 57 [2021-12-06 21:03:51,535 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:51,535 INFO L470 AbstractCegarLoop]: Abstraction has 1891 states and 2503 transitions. [2021-12-06 21:03:51,535 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 21:03:51,535 INFO L276 IsEmpty]: Start isEmpty. Operand 1891 states and 2503 transitions. [2021-12-06 21:03:51,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2021-12-06 21:03:51,540 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:51,540 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:51,540 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 21:03:51,540 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:51,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:51,541 INFO L85 PathProgramCache]: Analyzing trace with hash 1457514374, now seen corresponding path program 1 times [2021-12-06 21:03:51,541 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:51,541 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1133373102] [2021-12-06 21:03:51,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:51,541 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:51,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 21:03:51,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 21:03:51,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 21:03:51,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 21:03:51,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:51,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-06 21:03:51,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-06 21:03:51,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:51,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 21:03:51,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,638 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-06 21:03:51,638 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:51,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1133373102] [2021-12-06 21:03:51,638 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1133373102] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 21:03:51,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2068777956] [2021-12-06 21:03:51,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:51,639 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 21:03:51,639 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 21:03:51,640 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 21:03:51,640 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 21:03:51,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:51,710 INFO L263 TraceCheckSpWp]: Trace formula consists of 486 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 21:03:51,716 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 21:03:51,864 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:03:51,864 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 21:03:51,864 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2068777956] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:51,864 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 21:03:51,864 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2021-12-06 21:03:51,864 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1823697523] [2021-12-06 21:03:51,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:51,865 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 21:03:51,865 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:51,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 21:03:51,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-06 21:03:51,865 INFO L87 Difference]: Start difference. First operand 1891 states and 2503 transitions. Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-06 21:03:51,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:51,942 INFO L93 Difference]: Finished difference Result 3333 states and 4492 transitions. [2021-12-06 21:03:51,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 21:03:51,942 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 100 [2021-12-06 21:03:51,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:51,951 INFO L225 Difference]: With dead ends: 3333 [2021-12-06 21:03:51,951 INFO L226 Difference]: Without dead ends: 1726 [2021-12-06 21:03:51,957 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-06 21:03:51,957 INFO L933 BasicCegarLoop]: 157 mSDtfsCounter, 53 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 230 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:51,958 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [53 Valid, 230 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 21:03:51,960 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1726 states. [2021-12-06 21:03:52,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1726 to 1726. [2021-12-06 21:03:52,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1726 states, 1263 states have (on average 1.1916072842438639) internal successors, (1505), 1361 states have internal predecessors, (1505), 240 states have call successors, (240), 190 states have call predecessors, (240), 222 states have return successors, (384), 233 states have call predecessors, (384), 240 states have call successors, (384) [2021-12-06 21:03:52,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1726 states to 1726 states and 2129 transitions. [2021-12-06 21:03:52,052 INFO L78 Accepts]: Start accepts. Automaton has 1726 states and 2129 transitions. Word has length 100 [2021-12-06 21:03:52,053 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:52,053 INFO L470 AbstractCegarLoop]: Abstraction has 1726 states and 2129 transitions. [2021-12-06 21:03:52,053 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-06 21:03:52,053 INFO L276 IsEmpty]: Start isEmpty. Operand 1726 states and 2129 transitions. [2021-12-06 21:03:52,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2021-12-06 21:03:52,056 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:52,056 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:52,089 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 21:03:52,257 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-06 21:03:52,258 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:52,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:52,260 INFO L85 PathProgramCache]: Analyzing trace with hash 2033027807, now seen corresponding path program 1 times [2021-12-06 21:03:52,260 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:52,261 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [505189949] [2021-12-06 21:03:52,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:52,261 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:52,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 21:03:52,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 21:03:52,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 21:03:52,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 21:03:52,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:52,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-06 21:03:52,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-06 21:03:52,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-06 21:03:52,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:52,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 21:03:52,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,447 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2021-12-06 21:03:52,447 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:52,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [505189949] [2021-12-06 21:03:52,447 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [505189949] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 21:03:52,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1580822071] [2021-12-06 21:03:52,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:52,448 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 21:03:52,448 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 21:03:52,449 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 21:03:52,449 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-06 21:03:52,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:52,518 INFO L263 TraceCheckSpWp]: Trace formula consists of 505 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 21:03:52,522 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 21:03:52,613 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-06 21:03:52,613 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 21:03:52,614 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1580822071] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:52,614 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 21:03:52,614 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2021-12-06 21:03:52,614 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1705991567] [2021-12-06 21:03:52,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:52,615 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 21:03:52,615 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:52,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 21:03:52,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 21:03:52,616 INFO L87 Difference]: Start difference. First operand 1726 states and 2129 transitions. Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-06 21:03:52,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:52,677 INFO L93 Difference]: Finished difference Result 1969 states and 2439 transitions. [2021-12-06 21:03:52,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 21:03:52,677 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 108 [2021-12-06 21:03:52,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:52,682 INFO L225 Difference]: With dead ends: 1969 [2021-12-06 21:03:52,683 INFO L226 Difference]: Without dead ends: 718 [2021-12-06 21:03:52,688 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 21:03:52,689 INFO L933 BasicCegarLoop]: 141 mSDtfsCounter, 38 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:52,689 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 251 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 21:03:52,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 718 states. [2021-12-06 21:03:52,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 718 to 718. [2021-12-06 21:03:52,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 718 states, 525 states have (on average 1.1638095238095238) internal successors, (611), 564 states have internal predecessors, (611), 99 states have call successors, (99), 77 states have call predecessors, (99), 93 states have return successors, (155), 99 states have call predecessors, (155), 99 states have call successors, (155) [2021-12-06 21:03:52,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 718 states to 718 states and 865 transitions. [2021-12-06 21:03:52,739 INFO L78 Accepts]: Start accepts. Automaton has 718 states and 865 transitions. Word has length 108 [2021-12-06 21:03:52,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:52,739 INFO L470 AbstractCegarLoop]: Abstraction has 718 states and 865 transitions. [2021-12-06 21:03:52,739 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-06 21:03:52,739 INFO L276 IsEmpty]: Start isEmpty. Operand 718 states and 865 transitions. [2021-12-06 21:03:52,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2021-12-06 21:03:52,742 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:03:52,742 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:52,763 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-06 21:03:52,943 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 21:03:52,943 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:03:52,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:03:52,944 INFO L85 PathProgramCache]: Analyzing trace with hash 2017248584, now seen corresponding path program 1 times [2021-12-06 21:03:52,944 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:03:52,944 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2118067090] [2021-12-06 21:03:52,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:52,944 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:03:52,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 21:03:53,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 21:03:53,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 21:03:53,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 21:03:53,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:53,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-06 21:03:53,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-06 21:03:53,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-06 21:03:53,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 21:03:53,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 21:03:53,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-06 21:03:53,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,068 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-06 21:03:53,068 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:03:53,068 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2118067090] [2021-12-06 21:03:53,069 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2118067090] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 21:03:53,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1690211601] [2021-12-06 21:03:53,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:03:53,069 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 21:03:53,069 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 21:03:53,070 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 21:03:53,070 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-06 21:03:53,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:03:53,139 INFO L263 TraceCheckSpWp]: Trace formula consists of 509 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 21:03:53,143 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 21:03:53,302 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-12-06 21:03:53,302 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 21:03:53,302 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1690211601] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:03:53,302 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 21:03:53,302 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-12-06 21:03:53,302 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1093419356] [2021-12-06 21:03:53,303 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:03:53,303 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 21:03:53,303 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:03:53,303 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 21:03:53,303 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2021-12-06 21:03:53,304 INFO L87 Difference]: Start difference. First operand 718 states and 865 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-06 21:03:53,385 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:03:53,385 INFO L93 Difference]: Finished difference Result 1292 states and 1550 transitions. [2021-12-06 21:03:53,386 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 21:03:53,386 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 110 [2021-12-06 21:03:53,386 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:03:53,387 INFO L225 Difference]: With dead ends: 1292 [2021-12-06 21:03:53,387 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 21:03:53,391 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2021-12-06 21:03:53,391 INFO L933 BasicCegarLoop]: 181 mSDtfsCounter, 45 mSDsluCounter, 766 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 947 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 21:03:53,392 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [46 Valid, 947 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 21:03:53,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 21:03:53,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 21:03:53,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 21:03:53,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 21:03:53,393 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2021-12-06 21:03:53,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:03:53,393 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 21:03:53,393 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-06 21:03:53,393 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 21:03:53,393 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 21:03:53,396 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 21:03:53,417 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-12-06 21:03:53,597 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-06 21:03:53,599 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 21:03:57,253 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 394 401) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= 1 ~systemActive~0)) .cse1) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2021-12-06 21:03:57,253 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 394 401) no Hoare annotation was computed. [2021-12-06 21:03:57,254 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 394 401) no Hoare annotation was computed. [2021-12-06 21:03:57,254 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 301 307) no Hoare annotation was computed. [2021-12-06 21:03:57,254 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 301 307) the Hoare annotation is: true [2021-12-06 21:03:57,254 INFO L858 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2021-12-06 21:03:57,254 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 122 133) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse6 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse6) (or .cse5 .cse2 .cse4 (not (= 0 ~systemActive~0))))) [2021-12-06 21:03:57,254 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2021-12-06 21:03:57,254 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 919 948) no Hoare annotation was computed. [2021-12-06 21:03:57,254 INFO L861 garLoopResultBuilder]: At program point L929-2(lines 929 943) the Hoare annotation is: true [2021-12-06 21:03:57,254 INFO L861 garLoopResultBuilder]: At program point L925(line 925) the Hoare annotation is: true [2021-12-06 21:03:57,254 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 919 948) the Hoare annotation is: true [2021-12-06 21:03:57,254 INFO L858 garLoopResultBuilder]: For program point L925-1(line 925) no Hoare annotation was computed. [2021-12-06 21:03:57,254 INFO L861 garLoopResultBuilder]: At program point L944(lines 919 948) the Hoare annotation is: true [2021-12-06 21:03:57,254 INFO L858 garLoopResultBuilder]: For program point L940(line 940) no Hoare annotation was computed. [2021-12-06 21:03:57,255 INFO L858 garLoopResultBuilder]: For program point L933(lines 933 937) no Hoare annotation was computed. [2021-12-06 21:03:57,255 INFO L861 garLoopResultBuilder]: At program point L933-1(lines 933 937) the Hoare annotation is: true [2021-12-06 21:03:57,255 INFO L858 garLoopResultBuilder]: For program point L930(line 930) no Hoare annotation was computed. [2021-12-06 21:03:57,255 INFO L854 garLoopResultBuilder]: At program point L894(line 894) the Hoare annotation is: (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse15 (= 1 ~systemActive~0))) (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse14 .cse16 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse15)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse9 (not .cse16)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (and .cse14 .cse13)) (.cse5 (not .cse15)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse6) (or .cse0 .cse7 .cse4) (or .cse5 .cse8 .cse9 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse9) (or .cse1 .cse5 .cse8 .cse9 .cse10) (or .cse0 .cse1 .cse7 .cse5 (and .cse11 .cse2 .cse12 .cse13) .cse9) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse14 .cse5 .cse8 .cse6) (or .cse0 .cse1 .cse7 .cse5 (and .cse11 .cse12 .cse13) .cse6)))) [2021-12-06 21:03:57,255 INFO L858 garLoopResultBuilder]: For program point L894-1(line 894) no Hoare annotation was computed. [2021-12-06 21:03:57,255 INFO L854 garLoopResultBuilder]: At program point L407(line 407) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-12-06 21:03:57,255 INFO L858 garLoopResultBuilder]: For program point L407-1(line 407) no Hoare annotation was computed. [2021-12-06 21:03:57,255 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 277 300) no Hoare annotation was computed. [2021-12-06 21:03:57,255 INFO L858 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2021-12-06 21:03:57,255 INFO L854 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-12-06 21:03:57,255 INFO L858 garLoopResultBuilder]: For program point L288-1(lines 288 294) no Hoare annotation was computed. [2021-12-06 21:03:57,255 INFO L858 garLoopResultBuilder]: For program point L1019(line 1019) no Hoare annotation was computed. [2021-12-06 21:03:57,256 INFO L854 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-12-06 21:03:57,256 INFO L854 garLoopResultBuilder]: At program point L371(line 371) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7 .cse8) .cse1 .cse2 .cse5 .cse3) (or .cse2 .cse5 .cse3 (and .cse4 .cse7 .cse8) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-12-06 21:03:57,256 INFO L858 garLoopResultBuilder]: For program point L900(lines 900 910) no Hoare annotation was computed. [2021-12-06 21:03:57,256 INFO L858 garLoopResultBuilder]: For program point L896(lines 896 913) no Hoare annotation was computed. [2021-12-06 21:03:57,256 INFO L854 garLoopResultBuilder]: At program point L896-1(lines 888 916) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse5 (and .cse1 .cse2 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse14)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not .cse15)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not .cse14)) (.cse12 (<= 1 ~pumpRunning~0)) (.cse13 (<= 2 ~waterLevel~0)) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse10 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4) (or .cse5 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse9 .cse10 .cse4) (or .cse0 .cse11 .cse6 (and .cse12 .cse13 .cse3) .cse8 (and .cse1 .cse2 .cse14 .cse3)) (or .cse6 .cse7 .cse9 (and .cse1 .cse2 .cse10) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse10)) (or .cse5 .cse11 .cse6 .cse7 .cse8) (or .cse0 .cse11 .cse6 (and .cse12 .cse2 .cse13 .cse10 .cse3) .cse9 (and .cse1 .cse2 .cse10 .cse3))))) [2021-12-06 21:03:57,256 INFO L854 garLoopResultBuilder]: At program point L380(line 380) the Hoare annotation is: (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse1 .cse3 .cse5 .cse6) (or .cse3 .cse5 .cse4) (or .cse3 .cse5 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse3 (and .cse7 .cse2 .cse8) .cse6) (or .cse0 .cse1 (and .cse7 .cse8) .cse3 .cse4) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-12-06 21:03:57,256 INFO L854 garLoopResultBuilder]: At program point L1020(lines 1015 1022) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-12-06 21:03:57,256 INFO L854 garLoopResultBuilder]: At program point L380-1(lines 361 385) the Hoare annotation is: (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse13 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse14)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse7 (not .cse15)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (and .cse13 .cse12)) (.cse4 (not .cse14)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse4 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse7) (or .cse1 .cse4 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse2 .cse11 .cse12) .cse7) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse13 .cse4 .cse6 .cse5) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse11 .cse12) .cse5) (or .cse0 (not (= 0 ~systemActive~0)))))) [2021-12-06 21:03:57,257 INFO L854 garLoopResultBuilder]: At program point L409(lines 402 412) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7)) (or .cse2 .cse5 .cse3 (and .cse4 .cse7) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-12-06 21:03:57,257 INFO L858 garLoopResultBuilder]: For program point L281-1(lines 280 299) no Hoare annotation was computed. [2021-12-06 21:03:57,257 INFO L858 garLoopResultBuilder]: For program point L901(lines 901 907) no Hoare annotation was computed. [2021-12-06 21:03:57,257 INFO L854 garLoopResultBuilder]: At program point L418(lines 413 421) the Hoare annotation is: (let ((.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse13 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse15 (= 1 ~systemActive~0))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (and .cse12 .cse14 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse13 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse15)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not .cse15)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse8 (not .cse14)) (.cse10 (and .cse12 .cse13 .cse11))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7) (or .cse1 .cse5 .cse6 .cse8 .cse9) (or .cse0 .cse7 .cse4) (or .cse0 .cse1 .cse5 .cse7) (or .cse0 .cse10 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse8) (or .cse5 .cse6 .cse8 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse5 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse11) .cse8 .cse10)))) [2021-12-06 21:03:57,257 INFO L858 garLoopResultBuilder]: For program point L369(lines 369 377) no Hoare annotation was computed. [2021-12-06 21:03:57,257 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 277 300) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse12 .cse5)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and .cse4 .cse2 .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (and .cse4 .cse5) .cse3) (or .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse6 .cse10 .cse8) (or .cse6 .cse7 .cse11 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse6 .cse10 .cse11) (or (and .cse12 .cse2 .cse5) .cse1 .cse6 .cse7 .cse11)))) [2021-12-06 21:03:57,257 INFO L858 garLoopResultBuilder]: For program point L365(lines 365 382) no Hoare annotation was computed. [2021-12-06 21:03:57,257 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 277 300) no Hoare annotation was computed. [2021-12-06 21:03:57,257 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1019) no Hoare annotation was computed. [2021-12-06 21:03:57,257 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 134 142) the Hoare annotation is: true [2021-12-06 21:03:57,257 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2021-12-06 21:03:57,257 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2021-12-06 21:03:57,258 INFO L854 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) .cse1 .cse2) (and .cse0 (= |ULTIMATE.start_valid_product_#res#1| 1) (<= 2 ~waterLevel~0) .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2021-12-06 21:03:57,258 INFO L858 garLoopResultBuilder]: For program point L213(lines 212 259) no Hoare annotation was computed. [2021-12-06 21:03:57,258 INFO L858 garLoopResultBuilder]: For program point L242(lines 242 255) no Hoare annotation was computed. [2021-12-06 21:03:57,258 INFO L861 garLoopResultBuilder]: At program point L1010(lines 991 1013) the Hoare annotation is: true [2021-12-06 21:03:57,258 INFO L854 garLoopResultBuilder]: At program point L977(lines 973 979) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2021-12-06 21:03:57,258 INFO L854 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-06 21:03:57,258 INFO L861 garLoopResultBuilder]: At program point L263(lines 202 267) the Hoare annotation is: true [2021-12-06 21:03:57,258 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 21:03:57,258 INFO L858 garLoopResultBuilder]: For program point L222(lines 222 228) no Hoare annotation was computed. [2021-12-06 21:03:57,258 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 21:03:57,258 INFO L858 garLoopResultBuilder]: For program point L222-1(lines 222 228) no Hoare annotation was computed. [2021-12-06 21:03:57,258 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 21:03:57,258 INFO L858 garLoopResultBuilder]: For program point L214(lines 214 218) no Hoare annotation was computed. [2021-12-06 21:03:57,258 INFO L854 garLoopResultBuilder]: At program point L260(lines 211 261) the Hoare annotation is: false [2021-12-06 21:03:57,259 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 21:03:57,259 INFO L854 garLoopResultBuilder]: At program point L508(lines 496 510) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2021-12-06 21:03:57,259 INFO L858 garLoopResultBuilder]: For program point L248(lines 248 254) no Hoare annotation was computed. [2021-12-06 21:03:57,259 INFO L854 garLoopResultBuilder]: At program point L248-2(lines 242 255) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-06 21:03:57,259 INFO L858 garLoopResultBuilder]: For program point L500(lines 500 506) no Hoare annotation was computed. [2021-12-06 21:03:57,259 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 21:03:57,259 INFO L858 garLoopResultBuilder]: For program point L500-1(lines 500 506) no Hoare annotation was computed. [2021-12-06 21:03:57,259 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 21:03:57,259 INFO L858 garLoopResultBuilder]: For program point L232(lines 232 238) no Hoare annotation was computed. [2021-12-06 21:03:57,259 INFO L858 garLoopResultBuilder]: For program point L232-1(lines 232 238) no Hoare annotation was computed. [2021-12-06 21:03:57,259 INFO L854 garLoopResultBuilder]: At program point L257(lines 212 259) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-06 21:03:57,259 INFO L854 garLoopResultBuilder]: At program point L224(line 224) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-06 21:03:57,259 INFO L861 garLoopResultBuilder]: At program point L988(lines 980 990) the Hoare annotation is: true [2021-12-06 21:03:57,259 INFO L854 garLoopResultBuilder]: At program point L885(lines 880 887) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2021-12-06 21:03:57,260 INFO L858 garLoopResultBuilder]: For program point L1001(lines 1001 1008) no Hoare annotation was computed. [2021-12-06 21:03:57,260 INFO L858 garLoopResultBuilder]: For program point L1001-2(lines 1001 1008) no Hoare annotation was computed. [2021-12-06 21:03:57,260 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 21:03:57,260 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 309 333) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2021-12-06 21:03:57,260 INFO L854 garLoopResultBuilder]: At program point L473(lines 458 476) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2021-12-06 21:03:57,260 INFO L854 garLoopResultBuilder]: At program point L184(lines 175 188) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse3 .cse1 .cse4)))) [2021-12-06 21:03:57,260 INFO L858 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2021-12-06 21:03:57,260 INFO L858 garLoopResultBuilder]: For program point L467-2(lines 467 471) no Hoare annotation was computed. [2021-12-06 21:03:57,260 INFO L854 garLoopResultBuilder]: At program point L391(lines 386 393) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2021-12-06 21:03:57,260 INFO L854 garLoopResultBuilder]: At program point L323(line 323) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))))) [2021-12-06 21:03:57,261 INFO L858 garLoopResultBuilder]: For program point L317(lines 317 325) no Hoare annotation was computed. [2021-12-06 21:03:57,261 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 309 333) no Hoare annotation was computed. [2021-12-06 21:03:57,261 INFO L858 garLoopResultBuilder]: For program point L313(lines 313 330) no Hoare annotation was computed. [2021-12-06 21:03:57,261 INFO L858 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2021-12-06 21:03:57,261 INFO L854 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-12-06 21:03:57,261 INFO L858 garLoopResultBuilder]: For program point L328-1(lines 309 333) no Hoare annotation was computed. [2021-12-06 21:03:57,261 INFO L858 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2021-12-06 21:03:57,261 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2021-12-06 21:03:57,261 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 110 121) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse3 .cse5) (or .cse4 .cse3 .cse5 (not (= 0 ~systemActive~0))) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse4 .cse0 .cse6 .cse3 .cse5))) [2021-12-06 21:03:57,261 INFO L854 garLoopResultBuilder]: At program point L349(line 349) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-12-06 21:03:57,261 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 335 359) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2021-12-06 21:03:57,261 INFO L854 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-12-06 21:03:57,261 INFO L858 garLoopResultBuilder]: For program point L343(lines 343 351) no Hoare annotation was computed. [2021-12-06 21:03:57,262 INFO L858 garLoopResultBuilder]: For program point L339(lines 339 356) no Hoare annotation was computed. [2021-12-06 21:03:57,262 INFO L854 garLoopResultBuilder]: At program point L492(lines 477 495) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-12-06 21:03:57,262 INFO L858 garLoopResultBuilder]: For program point L486(lines 486 490) no Hoare annotation was computed. [2021-12-06 21:03:57,262 INFO L858 garLoopResultBuilder]: For program point L486-2(lines 486 490) no Hoare annotation was computed. [2021-12-06 21:03:57,262 INFO L854 garLoopResultBuilder]: At program point L354(line 354) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2021-12-06 21:03:57,262 INFO L858 garLoopResultBuilder]: For program point L354-1(lines 335 359) no Hoare annotation was computed. [2021-12-06 21:03:57,262 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 335 359) no Hoare annotation was computed. [2021-12-06 21:03:57,262 INFO L854 garLoopResultBuilder]: At program point L194(lines 189 197) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2021-12-06 21:03:57,264 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:03:57,265 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 21:03:57,293 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 09:03:57 BoogieIcfgContainer [2021-12-06 21:03:57,293 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 21:03:57,293 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 21:03:57,293 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 21:03:57,293 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 21:03:57,294 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 09:03:48" (3/4) ... [2021-12-06 21:03:57,296 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 21:03:57,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-06 21:03:57,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 21:03:57,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 21:03:57,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 21:03:57,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 21:03:57,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-06 21:03:57,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 21:03:57,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 21:03:57,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-06 21:03:57,307 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-06 21:03:57,308 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 21:03:57,308 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 21:03:57,309 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 21:03:57,309 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 21:03:57,310 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 21:03:57,310 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 21:03:57,327 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-12-06 21:03:57,327 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 [2021-12-06 21:03:57,327 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 [2021-12-06 21:03:57,327 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) [2021-12-06 21:03:57,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-12-06 21:03:57,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-12-06 21:03:57,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0))) && (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) [2021-12-06 21:03:57,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-12-06 21:03:57,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1 [2021-12-06 21:03:57,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) [2021-12-06 21:03:57,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2021-12-06 21:03:57,330 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2021-12-06 21:03:57,330 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-12-06 21:03:57,330 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2021-12-06 21:03:57,330 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2021-12-06 21:03:57,330 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2021-12-06 21:03:57,352 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 21:03:57,353 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 21:03:57,353 INFO L158 Benchmark]: Toolchain (without parser) took 9627.50ms. Allocated memory was 104.9MB in the beginning and 151.0MB in the end (delta: 46.1MB). Free memory was 70.5MB in the beginning and 45.8MB in the end (delta: 24.7MB). Peak memory consumption was 70.8MB. Max. memory is 16.1GB. [2021-12-06 21:03:57,354 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 75.5MB. Free memory was 53.3MB in the beginning and 53.3MB in the end (delta: 28.2kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 21:03:57,354 INFO L158 Benchmark]: CACSL2BoogieTranslator took 336.19ms. Allocated memory is still 104.9MB. Free memory was 70.2MB in the beginning and 73.3MB in the end (delta: -3.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-06 21:03:57,354 INFO L158 Benchmark]: Boogie Procedure Inliner took 38.10ms. Allocated memory is still 104.9MB. Free memory was 73.3MB in the beginning and 70.7MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 21:03:57,355 INFO L158 Benchmark]: Boogie Preprocessor took 22.97ms. Allocated memory is still 104.9MB. Free memory was 70.7MB in the beginning and 69.1MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 21:03:57,355 INFO L158 Benchmark]: RCFGBuilder took 381.27ms. Allocated memory is still 104.9MB. Free memory was 69.1MB in the beginning and 51.3MB in the end (delta: 17.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-06 21:03:57,355 INFO L158 Benchmark]: TraceAbstraction took 8784.18ms. Allocated memory was 104.9MB in the beginning and 151.0MB in the end (delta: 46.1MB). Free memory was 51.3MB in the beginning and 53.1MB in the end (delta: -1.8MB). Peak memory consumption was 66.4MB. Max. memory is 16.1GB. [2021-12-06 21:03:57,356 INFO L158 Benchmark]: Witness Printer took 59.53ms. Allocated memory is still 151.0MB. Free memory was 52.1MB in the beginning and 45.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-06 21:03:57,358 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 75.5MB. Free memory was 53.3MB in the beginning and 53.3MB in the end (delta: 28.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 336.19ms. Allocated memory is still 104.9MB. Free memory was 70.2MB in the beginning and 73.3MB in the end (delta: -3.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 38.10ms. Allocated memory is still 104.9MB. Free memory was 73.3MB in the beginning and 70.7MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 22.97ms. Allocated memory is still 104.9MB. Free memory was 70.7MB in the beginning and 69.1MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 381.27ms. Allocated memory is still 104.9MB. Free memory was 69.1MB in the beginning and 51.3MB in the end (delta: 17.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 8784.18ms. Allocated memory was 104.9MB in the beginning and 151.0MB in the end (delta: 46.1MB). Free memory was 51.3MB in the beginning and 53.1MB in the end (delta: -1.8MB). Peak memory consumption was 66.4MB. Max. memory is 16.1GB. * Witness Printer took 59.53ms. Allocated memory is still 151.0MB. Free memory was 52.1MB in the beginning and 45.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1019]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.7s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1783 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1759 mSDsluCounter, 4191 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2640 mSDsCounter, 606 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1835 IncrementalHoareTripleChecker+Invalid, 2441 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 606 mSolverCounterUnsat, 1551 mSDtfsCounter, 1835 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 538 GetRequests, 441 SyntacticMatches, 1 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 97 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1891occurred in iteration=9, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 619 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 3303 PreInvPairs, 3552 NumberOfFragments, 3308 HoareAnnotationTreeSize, 3303 FomulaSimplifications, 240 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 49 FomulaSimplificationsInter, 19085 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 1005 NumberOfCodeBlocks, 1005 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 990 ConstructedInterpolants, 0 QuantifiedInterpolants, 1694 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1500 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 224/234 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0))) && (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 386]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 980]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 212]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 1015]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1 - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 929]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-12-06 21:03:57,394 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9f3967cf-570c-43e6-9e97-a669afaac50b/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE