./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fa0eab3945757815cbe114f72b31b9c97b3f41e20a7d5f245c817ae82afdf9aa --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-07 01:22:14,453 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-07 01:22:14,455 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-07 01:22:14,482 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-07 01:22:14,482 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-07 01:22:14,483 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-07 01:22:14,484 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-07 01:22:14,486 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-07 01:22:14,488 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-07 01:22:14,488 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-07 01:22:14,489 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-07 01:22:14,490 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-07 01:22:14,491 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-07 01:22:14,492 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-07 01:22:14,493 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-07 01:22:14,494 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-07 01:22:14,495 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-07 01:22:14,496 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-07 01:22:14,497 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-07 01:22:14,499 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-07 01:22:14,501 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-07 01:22:14,502 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-07 01:22:14,503 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-07 01:22:14,504 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-07 01:22:14,506 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-07 01:22:14,507 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-07 01:22:14,507 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-07 01:22:14,508 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-07 01:22:14,508 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-07 01:22:14,509 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-07 01:22:14,509 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-07 01:22:14,510 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-07 01:22:14,511 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-07 01:22:14,511 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-07 01:22:14,512 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-07 01:22:14,512 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-07 01:22:14,512 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-07 01:22:14,513 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-07 01:22:14,513 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-07 01:22:14,513 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-07 01:22:14,514 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-07 01:22:14,514 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-07 01:22:14,530 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-07 01:22:14,531 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-07 01:22:14,531 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-07 01:22:14,531 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-07 01:22:14,531 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-07 01:22:14,532 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-07 01:22:14,532 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-07 01:22:14,532 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-07 01:22:14,532 INFO L138 SettingsManager]: * Use SBE=true [2021-12-07 01:22:14,532 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-07 01:22:14,533 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-07 01:22:14,533 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-07 01:22:14,533 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-07 01:22:14,533 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-07 01:22:14,533 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-07 01:22:14,533 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-07 01:22:14,533 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-07 01:22:14,533 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-07 01:22:14,534 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-07 01:22:14,534 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-07 01:22:14,534 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-07 01:22:14,534 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-07 01:22:14,534 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-07 01:22:14,534 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-07 01:22:14,534 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-07 01:22:14,534 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-07 01:22:14,535 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-07 01:22:14,535 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-07 01:22:14,535 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-07 01:22:14,535 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-07 01:22:14,535 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-07 01:22:14,535 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-07 01:22:14,535 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-07 01:22:14,535 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-07 01:22:14,535 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fa0eab3945757815cbe114f72b31b9c97b3f41e20a7d5f245c817ae82afdf9aa [2021-12-07 01:22:14,713 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-07 01:22:14,728 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-07 01:22:14,731 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-07 01:22:14,732 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-07 01:22:14,732 INFO L275 PluginConnector]: CDTParser initialized [2021-12-07 01:22:14,734 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c [2021-12-07 01:22:14,784 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/data/eb6ee8e05/856a4d1b201b4903a5bfce2573cc5b0e/FLAGfc5c6a13e [2021-12-07 01:22:15,223 INFO L306 CDTParser]: Found 1 translation units. [2021-12-07 01:22:15,224 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c [2021-12-07 01:22:15,234 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/data/eb6ee8e05/856a4d1b201b4903a5bfce2573cc5b0e/FLAGfc5c6a13e [2021-12-07 01:22:15,245 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/data/eb6ee8e05/856a4d1b201b4903a5bfce2573cc5b0e [2021-12-07 01:22:15,246 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-07 01:22:15,247 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-07 01:22:15,248 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-07 01:22:15,249 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-07 01:22:15,251 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-07 01:22:15,252 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,253 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@bfd8686 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15, skipping insertion in model container [2021-12-07 01:22:15,253 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,259 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-07 01:22:15,293 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-07 01:22:15,459 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c[11292,11305] [2021-12-07 01:22:15,494 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-07 01:22:15,501 INFO L203 MainTranslator]: Completed pre-run [2021-12-07 01:22:15,533 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c[11292,11305] [2021-12-07 01:22:15,552 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-07 01:22:15,566 INFO L208 MainTranslator]: Completed translation [2021-12-07 01:22:15,566 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15 WrapperNode [2021-12-07 01:22:15,566 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-07 01:22:15,567 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-07 01:22:15,567 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-07 01:22:15,567 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-07 01:22:15,574 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,589 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,616 INFO L137 Inliner]: procedures = 59, calls = 162, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 285 [2021-12-07 01:22:15,616 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-07 01:22:15,617 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-07 01:22:15,617 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-07 01:22:15,617 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-07 01:22:15,625 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,625 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,628 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,629 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,636 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,641 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,643 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,646 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-07 01:22:15,647 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-07 01:22:15,647 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-07 01:22:15,647 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-07 01:22:15,648 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (1/1) ... [2021-12-07 01:22:15,655 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-07 01:22:15,665 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 01:22:15,676 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-07 01:22:15,678 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-07 01:22:15,714 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-07 01:22:15,714 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-07 01:22:15,714 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-07 01:22:15,714 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-07 01:22:15,714 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-07 01:22:15,715 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-07 01:22:15,715 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-07 01:22:15,715 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-07 01:22:15,715 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-07 01:22:15,715 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-07 01:22:15,715 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-07 01:22:15,715 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-07 01:22:15,715 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-07 01:22:15,715 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-07 01:22:15,716 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-07 01:22:15,716 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-07 01:22:15,716 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-07 01:22:15,716 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-07 01:22:15,716 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-07 01:22:15,716 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-07 01:22:15,716 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-07 01:22:15,716 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-07 01:22:15,780 INFO L236 CfgBuilder]: Building ICFG [2021-12-07 01:22:15,782 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-07 01:22:16,038 INFO L277 CfgBuilder]: Performing block encoding [2021-12-07 01:22:16,046 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-07 01:22:16,046 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-07 01:22:16,048 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:22:16 BoogieIcfgContainer [2021-12-07 01:22:16,048 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-07 01:22:16,050 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-07 01:22:16,050 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-07 01:22:16,053 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-07 01:22:16,053 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 01:22:15" (1/3) ... [2021-12-07 01:22:16,053 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4693232d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 01:22:16, skipping insertion in model container [2021-12-07 01:22:16,054 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:22:15" (2/3) ... [2021-12-07 01:22:16,054 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4693232d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 01:22:16, skipping insertion in model container [2021-12-07 01:22:16,054 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:22:16" (3/3) ... [2021-12-07 01:22:16,055 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product56.cil.c [2021-12-07 01:22:16,060 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-07 01:22:16,060 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-07 01:22:16,106 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-07 01:22:16,112 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-07 01:22:16,113 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-07 01:22:16,129 INFO L276 IsEmpty]: Start isEmpty. Operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-07 01:22:16,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-07 01:22:16,138 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:16,138 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:16,139 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:16,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:16,144 INFO L85 PathProgramCache]: Analyzing trace with hash -1548791886, now seen corresponding path program 1 times [2021-12-07 01:22:16,152 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:16,153 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [65068180] [2021-12-07 01:22:16,153 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:16,153 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:16,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-07 01:22:16,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,332 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:16,332 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:16,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [65068180] [2021-12-07 01:22:16,333 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [65068180] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:16,333 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:16,333 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-07 01:22:16,334 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [656240784] [2021-12-07 01:22:16,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:16,338 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-07 01:22:16,338 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:16,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-07 01:22:16,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-07 01:22:16,367 INFO L87 Difference]: Start difference. First operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:22:16,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:16,402 INFO L93 Difference]: Finished difference Result 205 states and 280 transitions. [2021-12-07 01:22:16,403 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-07 01:22:16,404 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-07 01:22:16,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:16,414 INFO L225 Difference]: With dead ends: 205 [2021-12-07 01:22:16,414 INFO L226 Difference]: Without dead ends: 98 [2021-12-07 01:22:16,418 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-07 01:22:16,422 INFO L933 BasicCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:16,423 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 01:22:16,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2021-12-07 01:22:16,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 98. [2021-12-07 01:22:16,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 72 states have (on average 1.3194444444444444) internal successors, (95), 82 states have internal predecessors, (95), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-07 01:22:16,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2021-12-07 01:22:16,458 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 25 [2021-12-07 01:22:16,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:16,458 INFO L470 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2021-12-07 01:22:16,458 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:22:16,458 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2021-12-07 01:22:16,460 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-07 01:22:16,461 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:16,461 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:16,461 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-07 01:22:16,461 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:16,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:16,462 INFO L85 PathProgramCache]: Analyzing trace with hash 1194219528, now seen corresponding path program 1 times [2021-12-07 01:22:16,462 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:16,462 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [478374370] [2021-12-07 01:22:16,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:16,463 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:16,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-07 01:22:16,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,513 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:16,514 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:16,514 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [478374370] [2021-12-07 01:22:16,514 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [478374370] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:16,514 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:16,514 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 01:22:16,514 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2028528024] [2021-12-07 01:22:16,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:16,515 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-07 01:22:16,515 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:16,516 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 01:22:16,516 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 01:22:16,516 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:22:16,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:16,530 INFO L93 Difference]: Finished difference Result 156 states and 204 transitions. [2021-12-07 01:22:16,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 01:22:16,531 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-07 01:22:16,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:16,532 INFO L225 Difference]: With dead ends: 156 [2021-12-07 01:22:16,532 INFO L226 Difference]: Without dead ends: 89 [2021-12-07 01:22:16,533 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 01:22:16,534 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 17 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:16,535 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 208 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 01:22:16,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2021-12-07 01:22:16,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2021-12-07 01:22:16,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 66 states have (on average 1.3333333333333333) internal successors, (88), 76 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-07 01:22:16,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 116 transitions. [2021-12-07 01:22:16,544 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 116 transitions. Word has length 26 [2021-12-07 01:22:16,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:16,544 INFO L470 AbstractCegarLoop]: Abstraction has 89 states and 116 transitions. [2021-12-07 01:22:16,545 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:22:16,545 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 116 transitions. [2021-12-07 01:22:16,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-07 01:22:16,546 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:16,546 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:16,546 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-07 01:22:16,546 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:16,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:16,547 INFO L85 PathProgramCache]: Analyzing trace with hash -72231615, now seen corresponding path program 1 times [2021-12-07 01:22:16,547 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:16,547 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2017447737] [2021-12-07 01:22:16,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:16,547 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:16,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-07 01:22:16,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,603 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:16,603 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:16,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2017447737] [2021-12-07 01:22:16,603 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2017447737] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:16,603 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:16,603 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 01:22:16,603 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1702874213] [2021-12-07 01:22:16,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:16,604 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-07 01:22:16,604 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:16,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 01:22:16,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 01:22:16,605 INFO L87 Difference]: Start difference. First operand 89 states and 116 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:22:16,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:16,672 INFO L93 Difference]: Finished difference Result 213 states and 281 transitions. [2021-12-07 01:22:16,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-07 01:22:16,673 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-07 01:22:16,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:16,674 INFO L225 Difference]: With dead ends: 213 [2021-12-07 01:22:16,674 INFO L226 Difference]: Without dead ends: 132 [2021-12-07 01:22:16,675 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-07 01:22:16,676 INFO L933 BasicCegarLoop]: 128 mSDtfsCounter, 181 mSDsluCounter, 256 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:16,677 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [181 Valid, 384 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 01:22:16,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2021-12-07 01:22:16,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 129. [2021-12-07 01:22:16,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 96 states have (on average 1.3541666666666667) internal successors, (130), 109 states have internal predecessors, (130), 19 states have call successors, (19), 13 states have call predecessors, (19), 13 states have return successors, (20), 13 states have call predecessors, (20), 19 states have call successors, (20) [2021-12-07 01:22:16,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 169 transitions. [2021-12-07 01:22:16,690 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 169 transitions. Word has length 31 [2021-12-07 01:22:16,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:16,691 INFO L470 AbstractCegarLoop]: Abstraction has 129 states and 169 transitions. [2021-12-07 01:22:16,691 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:22:16,691 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 169 transitions. [2021-12-07 01:22:16,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-07 01:22:16,692 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:16,693 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:16,693 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-07 01:22:16,693 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:16,693 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:16,693 INFO L85 PathProgramCache]: Analyzing trace with hash 301498308, now seen corresponding path program 1 times [2021-12-07 01:22:16,693 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:16,694 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1161980835] [2021-12-07 01:22:16,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:16,694 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:16,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-07 01:22:16,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,744 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:16,744 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:16,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1161980835] [2021-12-07 01:22:16,744 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1161980835] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:16,745 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:16,745 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 01:22:16,745 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2056795054] [2021-12-07 01:22:16,745 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:16,745 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-07 01:22:16,745 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:16,746 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 01:22:16,746 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 01:22:16,746 INFO L87 Difference]: Start difference. First operand 129 states and 169 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:22:16,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:16,838 INFO L93 Difference]: Finished difference Result 369 states and 494 transitions. [2021-12-07 01:22:16,839 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-07 01:22:16,839 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-07 01:22:16,839 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:16,841 INFO L225 Difference]: With dead ends: 369 [2021-12-07 01:22:16,842 INFO L226 Difference]: Without dead ends: 248 [2021-12-07 01:22:16,842 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-07 01:22:16,844 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 84 mSDsluCounter, 447 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 574 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:16,844 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [87 Valid, 574 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 01:22:16,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2021-12-07 01:22:16,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 242. [2021-12-07 01:22:16,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 177 states have (on average 1.3389830508474576) internal successors, (237), 202 states have internal predecessors, (237), 38 states have call successors, (38), 26 states have call predecessors, (38), 26 states have return successors, (42), 26 states have call predecessors, (42), 38 states have call successors, (42) [2021-12-07 01:22:16,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 317 transitions. [2021-12-07 01:22:16,870 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 317 transitions. Word has length 34 [2021-12-07 01:22:16,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:16,870 INFO L470 AbstractCegarLoop]: Abstraction has 242 states and 317 transitions. [2021-12-07 01:22:16,870 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:22:16,870 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 317 transitions. [2021-12-07 01:22:16,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-07 01:22:16,872 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:16,873 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:16,873 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-07 01:22:16,873 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:16,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:16,873 INFO L85 PathProgramCache]: Analyzing trace with hash -393513024, now seen corresponding path program 1 times [2021-12-07 01:22:16,874 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:16,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1209513833] [2021-12-07 01:22:16,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:16,874 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:16,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-07 01:22:16,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-07 01:22:16,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:16,927 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:16,927 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:16,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1209513833] [2021-12-07 01:22:16,928 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1209513833] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:16,928 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:16,928 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 01:22:16,928 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [128918783] [2021-12-07 01:22:16,928 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:16,929 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-07 01:22:16,929 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:16,929 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 01:22:16,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 01:22:16,929 INFO L87 Difference]: Start difference. First operand 242 states and 317 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-07 01:22:17,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:17,131 INFO L93 Difference]: Finished difference Result 562 states and 759 transitions. [2021-12-07 01:22:17,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-07 01:22:17,131 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-12-07 01:22:17,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:17,134 INFO L225 Difference]: With dead ends: 562 [2021-12-07 01:22:17,134 INFO L226 Difference]: Without dead ends: 328 [2021-12-07 01:22:17,135 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-07 01:22:17,136 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 127 mSDsluCounter, 159 mSDsCounter, 0 mSdLazyCounter, 252 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 301 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 252 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:17,136 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [136 Valid, 265 Invalid, 301 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 252 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 01:22:17,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 328 states. [2021-12-07 01:22:17,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 328 to 317. [2021-12-07 01:22:17,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 234 states have (on average 1.2735042735042734) internal successors, (298), 255 states have internal predecessors, (298), 44 states have call successors, (44), 38 states have call predecessors, (44), 38 states have return successors, (63), 40 states have call predecessors, (63), 44 states have call successors, (63) [2021-12-07 01:22:17,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 405 transitions. [2021-12-07 01:22:17,163 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 405 transitions. Word has length 38 [2021-12-07 01:22:17,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:17,163 INFO L470 AbstractCegarLoop]: Abstraction has 317 states and 405 transitions. [2021-12-07 01:22:17,163 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-07 01:22:17,163 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 405 transitions. [2021-12-07 01:22:17,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-07 01:22:17,165 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:17,165 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:17,166 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-07 01:22:17,166 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:17,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:17,166 INFO L85 PathProgramCache]: Analyzing trace with hash 1783950440, now seen corresponding path program 1 times [2021-12-07 01:22:17,166 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:17,166 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1669503716] [2021-12-07 01:22:17,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:17,166 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:17,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-07 01:22:17,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-07 01:22:17,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:22:17,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-07 01:22:17,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,215 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:17,216 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:17,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1669503716] [2021-12-07 01:22:17,216 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1669503716] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:17,216 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:17,216 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 01:22:17,216 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1768510237] [2021-12-07 01:22:17,216 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:17,217 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-07 01:22:17,217 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:17,217 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 01:22:17,217 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 01:22:17,217 INFO L87 Difference]: Start difference. First operand 317 states and 405 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-07 01:22:17,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:17,373 INFO L93 Difference]: Finished difference Result 681 states and 864 transitions. [2021-12-07 01:22:17,373 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-07 01:22:17,374 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-07 01:22:17,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:17,376 INFO L225 Difference]: With dead ends: 681 [2021-12-07 01:22:17,376 INFO L226 Difference]: Without dead ends: 372 [2021-12-07 01:22:17,377 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-07 01:22:17,378 INFO L933 BasicCegarLoop]: 126 mSDtfsCounter, 165 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 249 SdHoareTripleChecker+Invalid, 226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:17,378 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [169 Valid, 249 Invalid, 226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 01:22:17,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 372 states. [2021-12-07 01:22:17,398 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 372 to 366. [2021-12-07 01:22:17,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 366 states, 269 states have (on average 1.245353159851301) internal successors, (335), 290 states have internal predecessors, (335), 48 states have call successors, (48), 38 states have call predecessors, (48), 48 states have return successors, (73), 52 states have call predecessors, (73), 48 states have call successors, (73) [2021-12-07 01:22:17,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 366 states to 366 states and 456 transitions. [2021-12-07 01:22:17,402 INFO L78 Accepts]: Start accepts. Automaton has 366 states and 456 transitions. Word has length 57 [2021-12-07 01:22:17,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:17,402 INFO L470 AbstractCegarLoop]: Abstraction has 366 states and 456 transitions. [2021-12-07 01:22:17,402 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-07 01:22:17,402 INFO L276 IsEmpty]: Start isEmpty. Operand 366 states and 456 transitions. [2021-12-07 01:22:17,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-12-07 01:22:17,404 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:17,404 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:17,404 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-07 01:22:17,404 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:17,404 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:17,404 INFO L85 PathProgramCache]: Analyzing trace with hash -1948781245, now seen corresponding path program 1 times [2021-12-07 01:22:17,405 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:17,405 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [133609485] [2021-12-07 01:22:17,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:17,405 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:17,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-07 01:22:17,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-07 01:22:17,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:22:17,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-07 01:22:17,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,463 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:17,463 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:17,464 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [133609485] [2021-12-07 01:22:17,464 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [133609485] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:17,464 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:17,464 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 01:22:17,464 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2117393306] [2021-12-07 01:22:17,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:17,465 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-07 01:22:17,465 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:17,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-07 01:22:17,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-07 01:22:17,465 INFO L87 Difference]: Start difference. First operand 366 states and 456 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-07 01:22:17,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:17,657 INFO L93 Difference]: Finished difference Result 738 states and 935 transitions. [2021-12-07 01:22:17,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-07 01:22:17,657 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2021-12-07 01:22:17,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:17,660 INFO L225 Difference]: With dead ends: 738 [2021-12-07 01:22:17,660 INFO L226 Difference]: Without dead ends: 380 [2021-12-07 01:22:17,661 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-07 01:22:17,662 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 141 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 315 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 315 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:17,662 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [142 Valid, 280 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 315 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 01:22:17,664 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 380 states. [2021-12-07 01:22:17,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 380 to 372. [2021-12-07 01:22:17,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 372 states, 275 states have (on average 1.24) internal successors, (341), 296 states have internal predecessors, (341), 48 states have call successors, (48), 38 states have call predecessors, (48), 48 states have return successors, (73), 52 states have call predecessors, (73), 48 states have call successors, (73) [2021-12-07 01:22:17,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 372 states to 372 states and 462 transitions. [2021-12-07 01:22:17,689 INFO L78 Accepts]: Start accepts. Automaton has 372 states and 462 transitions. Word has length 54 [2021-12-07 01:22:17,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:17,690 INFO L470 AbstractCegarLoop]: Abstraction has 372 states and 462 transitions. [2021-12-07 01:22:17,690 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-07 01:22:17,690 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 462 transitions. [2021-12-07 01:22:17,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-12-07 01:22:17,691 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:17,692 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:17,692 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-07 01:22:17,692 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:17,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:17,693 INFO L85 PathProgramCache]: Analyzing trace with hash -1526079419, now seen corresponding path program 1 times [2021-12-07 01:22:17,693 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:17,693 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [442719433] [2021-12-07 01:22:17,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:17,693 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:17,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-07 01:22:17,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-07 01:22:17,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:22:17,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-07 01:22:17,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,754 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:17,754 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:17,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [442719433] [2021-12-07 01:22:17,754 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [442719433] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:17,754 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:17,754 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 01:22:17,754 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [639254875] [2021-12-07 01:22:17,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:17,755 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-07 01:22:17,755 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:17,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 01:22:17,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 01:22:17,755 INFO L87 Difference]: Start difference. First operand 372 states and 462 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-07 01:22:17,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:17,912 INFO L93 Difference]: Finished difference Result 754 states and 963 transitions. [2021-12-07 01:22:17,912 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-07 01:22:17,912 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2021-12-07 01:22:17,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:17,915 INFO L225 Difference]: With dead ends: 754 [2021-12-07 01:22:17,915 INFO L226 Difference]: Without dead ends: 390 [2021-12-07 01:22:17,917 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-07 01:22:17,918 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 144 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 236 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 291 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 236 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:17,918 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [145 Valid, 238 Invalid, 291 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 236 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 01:22:17,919 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 390 states. [2021-12-07 01:22:17,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 390 to 376. [2021-12-07 01:22:17,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 376 states, 279 states have (on average 1.2365591397849462) internal successors, (345), 300 states have internal predecessors, (345), 48 states have call successors, (48), 38 states have call predecessors, (48), 48 states have return successors, (73), 52 states have call predecessors, (73), 48 states have call successors, (73) [2021-12-07 01:22:17,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 376 states to 376 states and 466 transitions. [2021-12-07 01:22:17,946 INFO L78 Accepts]: Start accepts. Automaton has 376 states and 466 transitions. Word has length 54 [2021-12-07 01:22:17,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:17,946 INFO L470 AbstractCegarLoop]: Abstraction has 376 states and 466 transitions. [2021-12-07 01:22:17,946 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-07 01:22:17,946 INFO L276 IsEmpty]: Start isEmpty. Operand 376 states and 466 transitions. [2021-12-07 01:22:17,947 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-12-07 01:22:17,948 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:17,948 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:17,948 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-07 01:22:17,948 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:17,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:17,949 INFO L85 PathProgramCache]: Analyzing trace with hash 963449543, now seen corresponding path program 1 times [2021-12-07 01:22:17,949 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:17,949 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [687860630] [2021-12-07 01:22:17,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:17,949 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:17,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-07 01:22:17,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-07 01:22:17,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:22:17,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:17,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-07 01:22:18,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,002 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:18,002 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:18,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [687860630] [2021-12-07 01:22:18,003 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [687860630] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:18,003 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:18,003 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 01:22:18,003 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1592743194] [2021-12-07 01:22:18,003 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:18,003 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-07 01:22:18,003 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:18,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 01:22:18,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 01:22:18,004 INFO L87 Difference]: Start difference. First operand 376 states and 466 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-07 01:22:18,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:18,272 INFO L93 Difference]: Finished difference Result 1140 states and 1465 transitions. [2021-12-07 01:22:18,273 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-07 01:22:18,273 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 54 [2021-12-07 01:22:18,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:18,277 INFO L225 Difference]: With dead ends: 1140 [2021-12-07 01:22:18,277 INFO L226 Difference]: Without dead ends: 772 [2021-12-07 01:22:18,279 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-07 01:22:18,279 INFO L933 BasicCegarLoop]: 151 mSDtfsCounter, 348 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 301 mSolverCounterSat, 146 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 351 SdHoareTripleChecker+Valid, 303 SdHoareTripleChecker+Invalid, 447 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 146 IncrementalHoareTripleChecker+Valid, 301 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:18,280 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [351 Valid, 303 Invalid, 447 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [146 Valid, 301 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-07 01:22:18,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 772 states. [2021-12-07 01:22:18,310 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 772 to 770. [2021-12-07 01:22:18,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 573 states have (on average 1.2076788830715532) internal successors, (692), 610 states have internal predecessors, (692), 100 states have call successors, (100), 92 states have call predecessors, (100), 96 states have return successors, (162), 100 states have call predecessors, (162), 100 states have call successors, (162) [2021-12-07 01:22:18,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 954 transitions. [2021-12-07 01:22:18,315 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 954 transitions. Word has length 54 [2021-12-07 01:22:18,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:18,315 INFO L470 AbstractCegarLoop]: Abstraction has 770 states and 954 transitions. [2021-12-07 01:22:18,315 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-07 01:22:18,315 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 954 transitions. [2021-12-07 01:22:18,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-07 01:22:18,316 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:18,317 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:18,317 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-07 01:22:18,317 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:18,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:18,317 INFO L85 PathProgramCache]: Analyzing trace with hash 1198586465, now seen corresponding path program 1 times [2021-12-07 01:22:18,317 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:18,317 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1091279022] [2021-12-07 01:22:18,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:18,318 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:18,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 01:22:18,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-07 01:22:18,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-07 01:22:18,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:22:18,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-07 01:22:18,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,367 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:18,367 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:18,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1091279022] [2021-12-07 01:22:18,367 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1091279022] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:18,367 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:22:18,367 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 01:22:18,368 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1015097434] [2021-12-07 01:22:18,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:18,368 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-07 01:22:18,368 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:18,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 01:22:18,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 01:22:18,369 INFO L87 Difference]: Start difference. First operand 770 states and 954 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-07 01:22:18,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:18,712 INFO L93 Difference]: Finished difference Result 1368 states and 1767 transitions. [2021-12-07 01:22:18,712 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-07 01:22:18,712 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2021-12-07 01:22:18,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:18,719 INFO L225 Difference]: With dead ends: 1368 [2021-12-07 01:22:18,719 INFO L226 Difference]: Without dead ends: 1366 [2021-12-07 01:22:18,720 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-12-07 01:22:18,720 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 479 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 276 mSolverCounterSat, 254 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 481 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 530 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 254 IncrementalHoareTripleChecker+Valid, 276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:18,721 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [481 Valid, 229 Invalid, 530 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [254 Valid, 276 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-07 01:22:18,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1366 states. [2021-12-07 01:22:18,764 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1366 to 1062. [2021-12-07 01:22:18,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1062 states, 785 states have (on average 1.2101910828025477) internal successors, (950), 846 states have internal predecessors, (950), 143 states have call successors, (143), 110 states have call predecessors, (143), 133 states have return successors, (278), 142 states have call predecessors, (278), 143 states have call successors, (278) [2021-12-07 01:22:18,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1062 states to 1062 states and 1371 transitions. [2021-12-07 01:22:18,771 INFO L78 Accepts]: Start accepts. Automaton has 1062 states and 1371 transitions. Word has length 58 [2021-12-07 01:22:18,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:18,772 INFO L470 AbstractCegarLoop]: Abstraction has 1062 states and 1371 transitions. [2021-12-07 01:22:18,772 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-07 01:22:18,772 INFO L276 IsEmpty]: Start isEmpty. Operand 1062 states and 1371 transitions. [2021-12-07 01:22:18,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2021-12-07 01:22:18,775 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:18,775 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:18,775 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-07 01:22:18,775 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:18,776 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:18,776 INFO L85 PathProgramCache]: Analyzing trace with hash -832622466, now seen corresponding path program 1 times [2021-12-07 01:22:18,776 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:18,776 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [410721819] [2021-12-07 01:22:18,776 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:18,776 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:18,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 01:22:18,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-07 01:22:18,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-07 01:22:18,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-07 01:22:18,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:22:18,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-07 01:22:18,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-07 01:22:18,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:22:18,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-12-07 01:22:18,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,883 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 21 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-07 01:22:18,883 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:18,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [410721819] [2021-12-07 01:22:18,884 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [410721819] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-07 01:22:18,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2014347401] [2021-12-07 01:22:18,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:18,884 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-07 01:22:18,884 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 01:22:18,885 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-07 01:22:18,886 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-07 01:22:18,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:18,963 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-07 01:22:18,971 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-07 01:22:19,123 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:22:19,123 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-07 01:22:19,124 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2014347401] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:19,124 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-07 01:22:19,124 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2021-12-07 01:22:19,124 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [95161545] [2021-12-07 01:22:19,124 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:19,124 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-07 01:22:19,125 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:19,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 01:22:19,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-07 01:22:19,125 INFO L87 Difference]: Start difference. First operand 1062 states and 1371 transitions. Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-07 01:22:19,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:19,182 INFO L93 Difference]: Finished difference Result 1830 states and 2407 transitions. [2021-12-07 01:22:19,183 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 01:22:19,183 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 102 [2021-12-07 01:22:19,183 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:19,187 INFO L225 Difference]: With dead ends: 1830 [2021-12-07 01:22:19,187 INFO L226 Difference]: Without dead ends: 950 [2021-12-07 01:22:19,190 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-07 01:22:19,191 INFO L933 BasicCegarLoop]: 159 mSDtfsCounter, 53 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:19,191 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [53 Valid, 233 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 01:22:19,193 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 950 states. [2021-12-07 01:22:19,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 950 to 950. [2021-12-07 01:22:19,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 950 states, 702 states have (on average 1.1851851851851851) internal successors, (832), 758 states have internal predecessors, (832), 128 states have call successors, (128), 103 states have call predecessors, (128), 119 states have return successors, (189), 125 states have call predecessors, (189), 128 states have call successors, (189) [2021-12-07 01:22:19,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 950 states to 950 states and 1149 transitions. [2021-12-07 01:22:19,233 INFO L78 Accepts]: Start accepts. Automaton has 950 states and 1149 transitions. Word has length 102 [2021-12-07 01:22:19,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:19,233 INFO L470 AbstractCegarLoop]: Abstraction has 950 states and 1149 transitions. [2021-12-07 01:22:19,233 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-07 01:22:19,234 INFO L276 IsEmpty]: Start isEmpty. Operand 950 states and 1149 transitions. [2021-12-07 01:22:19,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2021-12-07 01:22:19,236 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:22:19,236 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:19,265 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-07 01:22:19,436 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-07 01:22:19,437 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:22:19,437 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:22:19,437 INFO L85 PathProgramCache]: Analyzing trace with hash 1470383360, now seen corresponding path program 1 times [2021-12-07 01:22:19,437 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:22:19,437 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [864365915] [2021-12-07 01:22:19,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:19,437 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:22:19,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 01:22:19,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-07 01:22:19,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-07 01:22:19,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-07 01:22:19,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:22:19,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-07 01:22:19,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-07 01:22:19,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-07 01:22:19,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-07 01:22:19,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:22:19,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-07 01:22:19,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,551 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2021-12-07 01:22:19,551 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:22:19,551 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [864365915] [2021-12-07 01:22:19,551 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [864365915] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-07 01:22:19,551 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [861186818] [2021-12-07 01:22:19,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:22:19,552 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-07 01:22:19,552 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 01:22:19,553 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-07 01:22:19,554 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-07 01:22:19,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:22:19,621 INFO L263 TraceCheckSpWp]: Trace formula consists of 515 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-07 01:22:19,625 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-07 01:22:19,807 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-07 01:22:19,807 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-07 01:22:19,807 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [861186818] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:22:19,807 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-07 01:22:19,807 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-12-07 01:22:19,807 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [981509988] [2021-12-07 01:22:19,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:22:19,808 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-07 01:22:19,808 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:22:19,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-07 01:22:19,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2021-12-07 01:22:19,808 INFO L87 Difference]: Start difference. First operand 950 states and 1149 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-07 01:22:19,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:22:19,907 INFO L93 Difference]: Finished difference Result 1753 states and 2113 transitions. [2021-12-07 01:22:19,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-07 01:22:19,907 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 112 [2021-12-07 01:22:19,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:22:19,908 INFO L225 Difference]: With dead ends: 1753 [2021-12-07 01:22:19,908 INFO L226 Difference]: Without dead ends: 0 [2021-12-07 01:22:19,911 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2021-12-07 01:22:19,911 INFO L933 BasicCegarLoop]: 199 mSDtfsCounter, 53 mSDsluCounter, 741 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 940 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 01:22:19,912 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [54 Valid, 940 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 01:22:19,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-07 01:22:19,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-07 01:22:19,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 01:22:19,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-07 01:22:19,913 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 112 [2021-12-07 01:22:19,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:22:19,913 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-07 01:22:19,913 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-07 01:22:19,913 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-07 01:22:19,913 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-07 01:22:19,915 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-07 01:22:19,935 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-07 01:22:20,115 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-07 01:22:20,117 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-07 01:22:23,803 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 702 709) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2021-12-07 01:22:23,804 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 702 709) no Hoare annotation was computed. [2021-12-07 01:22:23,804 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 702 709) no Hoare annotation was computed. [2021-12-07 01:22:23,804 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 609 615) no Hoare annotation was computed. [2021-12-07 01:22:23,804 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 609 615) the Hoare annotation is: true [2021-12-07 01:22:23,804 INFO L858 garLoopResultBuilder]: For program point L463-1(lines 459 470) no Hoare annotation was computed. [2021-12-07 01:22:23,804 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 459 470) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 2 ~waterLevel~0)) .cse4 .cse2 .cse5) (or .cse6 .cse1 .cse4 .cse5 .cse3) (or .cse6 .cse0 .cse1 .cse3))) [2021-12-07 01:22:23,804 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 459 470) no Hoare annotation was computed. [2021-12-07 01:22:23,804 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 937 966) no Hoare annotation was computed. [2021-12-07 01:22:23,804 INFO L858 garLoopResultBuilder]: For program point L958(line 958) no Hoare annotation was computed. [2021-12-07 01:22:23,804 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 937 966) the Hoare annotation is: true [2021-12-07 01:22:23,804 INFO L858 garLoopResultBuilder]: For program point L951(lines 951 955) no Hoare annotation was computed. [2021-12-07 01:22:23,804 INFO L861 garLoopResultBuilder]: At program point L951-1(lines 951 955) the Hoare annotation is: true [2021-12-07 01:22:23,804 INFO L858 garLoopResultBuilder]: For program point L948(line 948) no Hoare annotation was computed. [2021-12-07 01:22:23,804 INFO L861 garLoopResultBuilder]: At program point L947-2(lines 947 961) the Hoare annotation is: true [2021-12-07 01:22:23,805 INFO L861 garLoopResultBuilder]: At program point L943(line 943) the Hoare annotation is: true [2021-12-07 01:22:23,805 INFO L858 garLoopResultBuilder]: For program point L943-1(line 943) no Hoare annotation was computed. [2021-12-07 01:22:23,805 INFO L861 garLoopResultBuilder]: At program point L962(lines 937 966) the Hoare annotation is: true [2021-12-07 01:22:23,805 INFO L854 garLoopResultBuilder]: At program point L688(line 688) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse2 (not .cse9)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse0 .cse4 (and .cse5 .cse6 .cse7) .cse3) (or .cse0 .cse4 .cse6 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse0 .cse4 (and .cse5 .cse7) .cse1) (or .cse4 .cse8 .cse3 .cse9) (or .cse8 .cse3 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse8 .cse1 .cse9)))) [2021-12-07 01:22:23,805 INFO L854 garLoopResultBuilder]: At program point L688-1(lines 669 693) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse6 (not .cse2))) (let ((.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (and .cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse6)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (and .cse7 .cse12)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse13 (= ~methAndRunningLastTime~0 0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse5 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse0 .cse5 .cse2) (or .cse4 .cse8 .cse9 (and .cse10 .cse11 .cse12) .cse5) (or .cse4 .cse1 .cse6) (or .cse4 .cse8 .cse13 .cse14 .cse5) (or .cse4 .cse8 .cse13 .cse14 .cse1) (or .cse8 .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse8 .cse9 (and .cse10 .cse13 .cse11 .cse12) .cse1))))) [2021-12-07 01:22:23,805 INFO L854 garLoopResultBuilder]: At program point L717(lines 710 720) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse7 (not .cse4)) (.cse3 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse6 .cse7) (or .cse5 .cse1 .cse7) (or .cse8 .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0) .cse3) .cse4) (or .cse2 .cse0 .cse6 .cse4) (or .cse5 .cse8 .cse1) (or .cse5 .cse8 .cse6)))) [2021-12-07 01:22:23,805 INFO L858 garLoopResultBuilder]: For program point L589-1(lines 588 607) no Hoare annotation was computed. [2021-12-07 01:22:23,805 INFO L854 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse6 (not .cse2))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (and .cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse6)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (and .cse8 .cse12)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse13 (= ~methAndRunningLastTime~0 0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse5 .cse1 .cse6) (or .cse4 .cse5 .cse7 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse0 .cse7 .cse2) (or .cse4 .cse9 .cse5 (and .cse10 .cse11 .cse12) .cse7) (or .cse4 .cse9 .cse13 .cse14 .cse7) (or .cse4 .cse9 .cse13 .cse14 .cse1) (or .cse9 .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse9 .cse5 (and .cse10 .cse13 .cse11 .cse12) .cse1))))) [2021-12-07 01:22:23,805 INFO L858 garLoopResultBuilder]: For program point L552-1(line 552) no Hoare annotation was computed. [2021-12-07 01:22:23,806 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 585 608) no Hoare annotation was computed. [2021-12-07 01:22:23,806 INFO L858 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2021-12-07 01:22:23,806 INFO L854 garLoopResultBuilder]: At program point L726(lines 721 729) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse12 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (and .cse11 .cse12 .cse7)) (.cse9 (not .cse4)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (and .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse12 (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 (and (<= 1 ~pumpRunning~0) .cse6 (<= 2 ~waterLevel~0) .cse7) .cse2 .cse8) (or .cse5 .cse2 .cse8 .cse9) (or .cse5 .cse10 .cse9) (or .cse5 .cse0 .cse6 (not (= |old(~waterLevel~0)| 1)) .cse2) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse10 .cse4) (or .cse5 .cse0 .cse10)))) [2021-12-07 01:22:23,806 INFO L858 garLoopResultBuilder]: For program point L677(lines 677 685) no Hoare annotation was computed. [2021-12-07 01:22:23,806 INFO L854 garLoopResultBuilder]: At program point L421(lines 416 423) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse2 (not .cse6)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse5 .cse3 .cse6) (or .cse5 .cse3 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse1 .cse6) (or .cse0 .cse4 .cse3) (or .cse0 .cse4 .cse1)))) [2021-12-07 01:22:23,806 INFO L858 garLoopResultBuilder]: For program point L673(lines 673 690) no Hoare annotation was computed. [2021-12-07 01:22:23,806 INFO L858 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2021-12-07 01:22:23,806 INFO L854 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse7 (not .cse4)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse6 .cse7) (or .cse5 .cse3 .cse7) (or .cse2 .cse1 .cse6 .cse4) (or .cse5 .cse0 .cse3) (or .cse5 .cse0 .cse6) (or .cse2 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-12-07 01:22:23,806 INFO L858 garLoopResultBuilder]: For program point L715-1(line 715) no Hoare annotation was computed. [2021-12-07 01:22:23,806 INFO L858 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2021-12-07 01:22:23,806 INFO L854 garLoopResultBuilder]: At program point L554-1(lines 546 574) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0))) (let ((.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse12 (not .cse11)) (.cse10 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~3#1| 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (and .cse10 .cse5 .cse6 .cse8)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (<= 1 ~pumpRunning~0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (and .cse10 .cse6 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse12)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (not .cse15))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8)) (or .cse9 (and .cse10 .cse5 .cse6) .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) .cse11) (or .cse0 .cse2 .cse3 .cse12) (or .cse0 .cse1 (and .cse4 .cse7 .cse8) .cse13 (and .cse10 .cse6 .cse8 .cse12) .cse11) (or .cse1 .cse9 .cse13 .cse14 .cse11) (or .cse9 .cse13 .cse14 .cse11 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (and .cse10 .cse6 .cse8) .cse13 .cse12))))) [2021-12-07 01:22:23,807 INFO L858 garLoopResultBuilder]: For program point L439(lines 439 443) no Hoare annotation was computed. [2021-12-07 01:22:23,807 INFO L854 garLoopResultBuilder]: At program point L439-2(lines 435 446) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse7 (not .cse4)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse6 .cse7) (or .cse5 .cse3 .cse7) (or .cse2 .cse1 .cse6 .cse4) (or .cse5 .cse0 .cse3) (or .cse5 .cse0 .cse6) (or .cse2 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-12-07 01:22:23,807 INFO L858 garLoopResultBuilder]: For program point L596-1(lines 596 602) no Hoare annotation was computed. [2021-12-07 01:22:23,807 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 585 608) the Hoare annotation is: (let ((.cse9 (= ~methAndRunningLastTime~0 0)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse14 .cse12)) (.cse7 (not .cse3)) (.cse2 (and .cse11 .cse12)) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (and .cse14 .cse9 .cse12)) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse4 .cse5 .cse1 .cse7) (or .cse0 .cse6 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse8 .cse9 .cse10 .cse1) (or .cse4 .cse8 .cse9 .cse10 .cse6) (or (and .cse11 .cse9 .cse12) .cse8 .cse0 .cse6 .cse3) (or .cse4 .cse8 .cse13 .cse6 .cse3) (or .cse4 .cse8 .cse13 .cse1 .cse3)))) [2021-12-07 01:22:23,807 INFO L858 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2021-12-07 01:22:23,807 INFO L854 garLoopResultBuilder]: At program point L683(line 683) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse2 (not .cse5)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 .cse5) (or .cse6 .cse4 .cse3 .cse5) (or .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse6 .cse3) (or .cse0 .cse6 .cse1)))) [2021-12-07 01:22:23,807 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 585 608) no Hoare annotation was computed. [2021-12-07 01:22:23,807 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2021-12-07 01:22:23,807 INFO L854 garLoopResultBuilder]: At program point L679(line 679) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse9 (not .cse2)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse0 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse1 .cse2) (or .cse7 .cse8 .cse9) (or .cse7 .cse1 .cse9) (or .cse3 .cse0 .cse8 .cse2) (or .cse7 .cse6 .cse1) (or .cse7 .cse6 .cse8)))) [2021-12-07 01:22:23,807 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 471 479) the Hoare annotation is: true [2021-12-07 01:22:23,807 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 471 479) no Hoare annotation was computed. [2021-12-07 01:22:23,808 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 471 479) no Hoare annotation was computed. [2021-12-07 01:22:23,808 INFO L854 garLoopResultBuilder]: At program point L543(lines 538 545) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:22:23,808 INFO L854 garLoopResultBuilder]: At program point L861(line 861) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4))) [2021-12-07 01:22:23,808 INFO L854 garLoopResultBuilder]: At program point L923(lines 919 925) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:22:23,808 INFO L854 garLoopResultBuilder]: At program point L824(lines 819 826) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse3 .cse4 .cse5 .cse6))) [2021-12-07 01:22:23,808 INFO L854 garLoopResultBuilder]: At program point L886(lines 839 888) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4))) [2021-12-07 01:22:23,808 INFO L858 garLoopResultBuilder]: For program point L849(lines 849 855) no Hoare annotation was computed. [2021-12-07 01:22:23,808 INFO L858 garLoopResultBuilder]: For program point L849-1(lines 849 855) no Hoare annotation was computed. [2021-12-07 01:22:23,808 INFO L854 garLoopResultBuilder]: At program point L816(lines 804 818) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4))) [2021-12-07 01:22:23,808 INFO L861 garLoopResultBuilder]: At program point L1006(lines 998 1008) the Hoare annotation is: true [2021-12-07 01:22:23,808 INFO L858 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2021-12-07 01:22:23,808 INFO L858 garLoopResultBuilder]: For program point L808(lines 808 814) no Hoare annotation was computed. [2021-12-07 01:22:23,808 INFO L858 garLoopResultBuilder]: For program point L808-1(lines 808 814) no Hoare annotation was computed. [2021-12-07 01:22:23,809 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-07 01:22:23,809 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-07 01:22:23,809 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-07 01:22:23,809 INFO L858 garLoopResultBuilder]: For program point L1019(lines 1019 1026) no Hoare annotation was computed. [2021-12-07 01:22:23,809 INFO L858 garLoopResultBuilder]: For program point L1019-2(lines 1019 1026) no Hoare annotation was computed. [2021-12-07 01:22:23,809 INFO L854 garLoopResultBuilder]: At program point L916(lines 912 918) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:22:23,809 INFO L861 garLoopResultBuilder]: At program point L1028(lines 1009 1031) the Hoare annotation is: true [2021-12-07 01:22:23,809 INFO L854 garLoopResultBuilder]: At program point L995(lines 991 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:22:23,809 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-07 01:22:23,809 INFO L861 garLoopResultBuilder]: At program point L892(lines 829 896) the Hoare annotation is: true [2021-12-07 01:22:23,809 INFO L858 garLoopResultBuilder]: For program point L859(lines 859 865) no Hoare annotation was computed. [2021-12-07 01:22:23,809 INFO L858 garLoopResultBuilder]: For program point L859-1(lines 859 865) no Hoare annotation was computed. [2021-12-07 01:22:23,809 INFO L854 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4))) [2021-12-07 01:22:23,809 INFO L854 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5))) [2021-12-07 01:22:23,810 INFO L854 garLoopResultBuilder]: At program point L889(lines 838 890) the Hoare annotation is: false [2021-12-07 01:22:23,810 INFO L858 garLoopResultBuilder]: For program point L877(lines 877 883) no Hoare annotation was computed. [2021-12-07 01:22:23,810 INFO L854 garLoopResultBuilder]: At program point L877-2(lines 869 884) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse5 (not .cse7)) (.cse6 (= ~pumpRunning~0 0)) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse7 .cse4) (and .cse6 .cse8 .cse9 .cse2 .cse3 .cse4) (and .cse6 .cse9 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse8 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse8 .cse1 .cse2 .cse3 .cse4)))) [2021-12-07 01:22:23,810 INFO L858 garLoopResultBuilder]: For program point L840(lines 839 888) no Hoare annotation was computed. [2021-12-07 01:22:23,810 INFO L858 garLoopResultBuilder]: For program point L869(lines 869 884) no Hoare annotation was computed. [2021-12-07 01:22:23,810 INFO L854 garLoopResultBuilder]: At program point L931(lines 926 934) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:22:23,810 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 617 641) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2021-12-07 01:22:23,810 INFO L854 garLoopResultBuilder]: At program point L636(line 636) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-07 01:22:23,810 INFO L858 garLoopResultBuilder]: For program point L636-1(lines 617 641) no Hoare annotation was computed. [2021-12-07 01:22:23,810 INFO L854 garLoopResultBuilder]: At program point L781(lines 766 784) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse4)))) [2021-12-07 01:22:23,810 INFO L854 garLoopResultBuilder]: At program point L521(lines 512 525) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2021-12-07 01:22:23,810 INFO L858 garLoopResultBuilder]: For program point L775(lines 775 779) no Hoare annotation was computed. [2021-12-07 01:22:23,811 INFO L858 garLoopResultBuilder]: For program point L775-2(lines 775 779) no Hoare annotation was computed. [2021-12-07 01:22:23,811 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 617 641) no Hoare annotation was computed. [2021-12-07 01:22:23,811 INFO L854 garLoopResultBuilder]: At program point L699(lines 694 701) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse3 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse2))) [2021-12-07 01:22:23,811 INFO L854 garLoopResultBuilder]: At program point L631(line 631) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse2) (or .cse0 .cse3 .cse1 .cse2))) [2021-12-07 01:22:23,811 INFO L858 garLoopResultBuilder]: For program point L625(lines 625 633) no Hoare annotation was computed. [2021-12-07 01:22:23,811 INFO L858 garLoopResultBuilder]: For program point L621(lines 621 638) no Hoare annotation was computed. [2021-12-07 01:22:23,811 INFO L858 garLoopResultBuilder]: For program point L516(lines 516 522) no Hoare annotation was computed. [2021-12-07 01:22:23,811 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 447 458) no Hoare annotation was computed. [2021-12-07 01:22:23,811 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 447 458) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (= 0 ~systemActive~0)) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse1 .cse2 .cse3 .cse5) (or .cse6 .cse0 .cse2 .cse5) (or .cse6 .cse4 .cse2 .cse5))) [2021-12-07 01:22:23,811 INFO L858 garLoopResultBuilder]: For program point L451-1(lines 447 458) no Hoare annotation was computed. [2021-12-07 01:22:23,811 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 643 667) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2021-12-07 01:22:23,811 INFO L854 garLoopResultBuilder]: At program point L531(lines 526 534) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-07 01:22:23,812 INFO L854 garLoopResultBuilder]: At program point L657(line 657) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-07 01:22:23,812 INFO L854 garLoopResultBuilder]: At program point L653(line 653) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-07 01:22:23,812 INFO L858 garLoopResultBuilder]: For program point L651(lines 651 659) no Hoare annotation was computed. [2021-12-07 01:22:23,812 INFO L858 garLoopResultBuilder]: For program point L647(lines 647 664) no Hoare annotation was computed. [2021-12-07 01:22:23,812 INFO L854 garLoopResultBuilder]: At program point L800(lines 785 803) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-07 01:22:23,812 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 643 667) no Hoare annotation was computed. [2021-12-07 01:22:23,812 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 798) no Hoare annotation was computed. [2021-12-07 01:22:23,812 INFO L858 garLoopResultBuilder]: For program point L794-2(lines 794 798) no Hoare annotation was computed. [2021-12-07 01:22:23,812 INFO L854 garLoopResultBuilder]: At program point L662(line 662) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2021-12-07 01:22:23,812 INFO L858 garLoopResultBuilder]: For program point L662-1(lines 643 667) no Hoare annotation was computed. [2021-12-07 01:22:23,814 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:22:23,815 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-07 01:22:23,843 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 01:22:23 BoogieIcfgContainer [2021-12-07 01:22:23,843 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-07 01:22:23,843 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-07 01:22:23,843 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-07 01:22:23,843 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-07 01:22:23,844 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:22:16" (3/4) ... [2021-12-07 01:22:23,846 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-07 01:22:23,851 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-07 01:22:23,851 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-07 01:22:23,851 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-07 01:22:23,851 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-07 01:22:23,851 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-07 01:22:23,851 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-07 01:22:23,851 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-07 01:22:23,851 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-07 01:22:23,851 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-07 01:22:23,858 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-07 01:22:23,858 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-07 01:22:23,859 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-07 01:22:23,859 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-07 01:22:23,860 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-07 01:22:23,860 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-07 01:22:23,861 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-07 01:22:23,878 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-07 01:22:23,878 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2021-12-07 01:22:23,878 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2021-12-07 01:22:23,878 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) [2021-12-07 01:22:23,879 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0))) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2021-12-07 01:22:23,879 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) [2021-12-07 01:22:23,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2021-12-07 01:22:23,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && tmp == 0) && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && tmp == 0) && methAndRunningLastTime == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) [2021-12-07 01:22:23,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) [2021-12-07 01:22:23,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1) [2021-12-07 01:22:23,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) [2021-12-07 01:22:23,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:22:23,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2021-12-07 01:22:23,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) [2021-12-07 01:22:23,882 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:22:23,882 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:22:23,882 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:22:23,904 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-07 01:22:23,904 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-07 01:22:23,905 INFO L158 Benchmark]: Toolchain (without parser) took 8657.42ms. Allocated memory was 113.2MB in the beginning and 155.2MB in the end (delta: 41.9MB). Free memory was 75.1MB in the beginning and 44.5MB in the end (delta: 30.6MB). Peak memory consumption was 70.8MB. Max. memory is 16.1GB. [2021-12-07 01:22:23,905 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 113.2MB. Free memory is still 92.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-07 01:22:23,905 INFO L158 Benchmark]: CACSL2BoogieTranslator took 318.05ms. Allocated memory is still 113.2MB. Free memory was 75.0MB in the beginning and 80.0MB in the end (delta: -5.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-07 01:22:23,906 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.30ms. Allocated memory is still 113.2MB. Free memory was 80.0MB in the beginning and 77.3MB in the end (delta: 2.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-07 01:22:23,906 INFO L158 Benchmark]: Boogie Preprocessor took 28.98ms. Allocated memory is still 113.2MB. Free memory was 77.3MB in the beginning and 75.8MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-07 01:22:23,907 INFO L158 Benchmark]: RCFGBuilder took 401.17ms. Allocated memory is still 113.2MB. Free memory was 75.6MB in the beginning and 57.9MB in the end (delta: 17.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-07 01:22:23,907 INFO L158 Benchmark]: TraceAbstraction took 7793.39ms. Allocated memory was 113.2MB in the beginning and 155.2MB in the end (delta: 41.9MB). Free memory was 57.4MB in the beginning and 51.9MB in the end (delta: 5.6MB). Peak memory consumption was 64.0MB. Max. memory is 16.1GB. [2021-12-07 01:22:23,907 INFO L158 Benchmark]: Witness Printer took 61.01ms. Allocated memory is still 155.2MB. Free memory was 51.9MB in the beginning and 44.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-07 01:22:23,909 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 113.2MB. Free memory is still 92.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 318.05ms. Allocated memory is still 113.2MB. Free memory was 75.0MB in the beginning and 80.0MB in the end (delta: -5.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.30ms. Allocated memory is still 113.2MB. Free memory was 80.0MB in the beginning and 77.3MB in the end (delta: 2.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 28.98ms. Allocated memory is still 113.2MB. Free memory was 77.3MB in the beginning and 75.8MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 401.17ms. Allocated memory is still 113.2MB. Free memory was 75.6MB in the beginning and 57.9MB in the end (delta: 17.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 7793.39ms. Allocated memory was 113.2MB in the beginning and 155.2MB in the end (delta: 41.9MB). Free memory was 57.4MB in the beginning and 51.9MB in the end (delta: 5.6MB). Peak memory consumption was 64.0MB. Max. memory is 16.1GB. * Witness Printer took 61.01ms. Allocated memory is still 155.2MB. Free memory was 51.9MB in the beginning and 44.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 107 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.7s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1820 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1792 mSDsluCounter, 4040 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2487 mSDsCounter, 656 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1691 IncrementalHoareTripleChecker+Invalid, 2347 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 656 mSolverCounterUnsat, 1553 mSDtfsCounter, 1691 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 427 GetRequests, 333 SyntacticMatches, 1 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 94 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1062occurred in iteration=10, InterpolantAutomatonStates: 86, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 354 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 2183 PreInvPairs, 2431 NumberOfFragments, 3356 HoareAnnotationTreeSize, 2183 FomulaSimplifications, 270 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 50 FomulaSimplificationsInter, 18416 FormulaSimplificationTreeSizeReductionInter, 3.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 859 NumberOfCodeBlocks, 859 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 845 ConstructedInterpolants, 0 QuantifiedInterpolants, 1502 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1007 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 149/158 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 694]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 804]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 721]: Loop Invariant Derived loop invariant: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 838]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: (((((((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0))) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 512]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 710]: Loop Invariant Derived loop invariant: (((((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && tmp == 0) && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && tmp == 0) && methAndRunningLastTime == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 819]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-12-07 01:22:23,965 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2d5b7bf2-9e55-4d28-b3f0-7a78d8ce6c48/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE