./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 59d05b45c2855b02eb92cf6428285b3e4820a09d46d6a6d0a0748347de3adbb6 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-07 01:16:43,007 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-07 01:16:43,009 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-07 01:16:43,038 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-07 01:16:43,038 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-07 01:16:43,039 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-07 01:16:43,041 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-07 01:16:43,043 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-07 01:16:43,045 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-07 01:16:43,046 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-07 01:16:43,047 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-07 01:16:43,048 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-07 01:16:43,049 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-07 01:16:43,050 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-07 01:16:43,052 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-07 01:16:43,053 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-07 01:16:43,054 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-07 01:16:43,055 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-07 01:16:43,057 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-07 01:16:43,060 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-07 01:16:43,062 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-07 01:16:43,063 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-07 01:16:43,064 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-07 01:16:43,065 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-07 01:16:43,067 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-07 01:16:43,068 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-07 01:16:43,068 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-07 01:16:43,069 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-07 01:16:43,069 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-07 01:16:43,070 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-07 01:16:43,070 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-07 01:16:43,071 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-07 01:16:43,071 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-07 01:16:43,072 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-07 01:16:43,072 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-07 01:16:43,072 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-07 01:16:43,073 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-07 01:16:43,073 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-07 01:16:43,073 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-07 01:16:43,074 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-07 01:16:43,074 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-07 01:16:43,075 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-07 01:16:43,091 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-07 01:16:43,092 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-07 01:16:43,092 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-07 01:16:43,092 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-07 01:16:43,092 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-07 01:16:43,092 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-07 01:16:43,093 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-07 01:16:43,093 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-07 01:16:43,093 INFO L138 SettingsManager]: * Use SBE=true [2021-12-07 01:16:43,093 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-07 01:16:43,093 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-07 01:16:43,093 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-07 01:16:43,094 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-07 01:16:43,094 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-07 01:16:43,094 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-07 01:16:43,094 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-07 01:16:43,094 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-07 01:16:43,094 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-07 01:16:43,094 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-07 01:16:43,094 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-07 01:16:43,094 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-07 01:16:43,095 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-07 01:16:43,095 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-07 01:16:43,095 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-07 01:16:43,095 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-07 01:16:43,095 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-07 01:16:43,095 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-07 01:16:43,095 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-07 01:16:43,095 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-07 01:16:43,095 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-07 01:16:43,096 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-07 01:16:43,096 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-07 01:16:43,096 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-07 01:16:43,096 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-07 01:16:43,096 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 59d05b45c2855b02eb92cf6428285b3e4820a09d46d6a6d0a0748347de3adbb6 [2021-12-07 01:16:43,297 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-07 01:16:43,312 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-07 01:16:43,314 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-07 01:16:43,315 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-07 01:16:43,315 INFO L275 PluginConnector]: CDTParser initialized [2021-12-07 01:16:43,316 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c [2021-12-07 01:16:43,359 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/data/2df35077c/f31a53b4615d46b4a0ee10b77f714540/FLAG7f9c2d1cd [2021-12-07 01:16:43,773 INFO L306 CDTParser]: Found 1 translation units. [2021-12-07 01:16:43,774 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c [2021-12-07 01:16:43,786 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/data/2df35077c/f31a53b4615d46b4a0ee10b77f714540/FLAG7f9c2d1cd [2021-12-07 01:16:43,796 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/data/2df35077c/f31a53b4615d46b4a0ee10b77f714540 [2021-12-07 01:16:43,797 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-07 01:16:43,798 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-07 01:16:43,800 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-07 01:16:43,800 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-07 01:16:43,802 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-07 01:16:43,803 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:16:43" (1/1) ... [2021-12-07 01:16:43,804 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@18c3de67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:43, skipping insertion in model container [2021-12-07 01:16:43,804 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:16:43" (1/1) ... [2021-12-07 01:16:43,809 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-07 01:16:43,838 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-07 01:16:43,991 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c[6823,6836] [2021-12-07 01:16:44,039 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-07 01:16:44,046 INFO L203 MainTranslator]: Completed pre-run [2021-12-07 01:16:44,067 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c[6823,6836] [2021-12-07 01:16:44,092 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-07 01:16:44,105 INFO L208 MainTranslator]: Completed translation [2021-12-07 01:16:44,106 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44 WrapperNode [2021-12-07 01:16:44,106 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-07 01:16:44,106 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-07 01:16:44,107 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-07 01:16:44,107 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-07 01:16:44,112 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,122 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,141 INFO L137 Inliner]: procedures = 60, calls = 164, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 284 [2021-12-07 01:16:44,142 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-07 01:16:44,142 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-07 01:16:44,142 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-07 01:16:44,142 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-07 01:16:44,149 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,149 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,151 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,151 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,156 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,160 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,161 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,163 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-07 01:16:44,164 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-07 01:16:44,164 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-07 01:16:44,164 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-07 01:16:44,165 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (1/1) ... [2021-12-07 01:16:44,171 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-07 01:16:44,181 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 01:16:44,191 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-07 01:16:44,193 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-07 01:16:44,221 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-07 01:16:44,221 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-07 01:16:44,221 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-07 01:16:44,222 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-07 01:16:44,222 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-07 01:16:44,222 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-07 01:16:44,222 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-07 01:16:44,222 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-07 01:16:44,222 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-07 01:16:44,222 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-07 01:16:44,222 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-07 01:16:44,223 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-07 01:16:44,223 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-07 01:16:44,223 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-07 01:16:44,223 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-07 01:16:44,223 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-07 01:16:44,223 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-07 01:16:44,223 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-07 01:16:44,224 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-07 01:16:44,224 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-07 01:16:44,224 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-07 01:16:44,224 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-07 01:16:44,224 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-07 01:16:44,224 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-07 01:16:44,280 INFO L236 CfgBuilder]: Building ICFG [2021-12-07 01:16:44,281 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-07 01:16:44,527 INFO L277 CfgBuilder]: Performing block encoding [2021-12-07 01:16:44,536 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-07 01:16:44,536 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-07 01:16:44,538 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:16:44 BoogieIcfgContainer [2021-12-07 01:16:44,538 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-07 01:16:44,540 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-07 01:16:44,540 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-07 01:16:44,543 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-07 01:16:44,543 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 01:16:43" (1/3) ... [2021-12-07 01:16:44,544 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@372900c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 01:16:44, skipping insertion in model container [2021-12-07 01:16:44,544 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:16:44" (2/3) ... [2021-12-07 01:16:44,544 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@372900c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 01:16:44, skipping insertion in model container [2021-12-07 01:16:44,544 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:16:44" (3/3) ... [2021-12-07 01:16:44,545 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product64.cil.c [2021-12-07 01:16:44,550 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-07 01:16:44,550 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-07 01:16:44,589 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-07 01:16:44,594 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-07 01:16:44,594 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-07 01:16:44,612 INFO L276 IsEmpty]: Start isEmpty. Operand has 115 states, 84 states have (on average 1.369047619047619) internal successors, (115), 95 states have internal predecessors, (115), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2021-12-07 01:16:44,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-07 01:16:44,620 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:16:44,621 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:44,621 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:16:44,627 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:16:44,627 INFO L85 PathProgramCache]: Analyzing trace with hash 2099245654, now seen corresponding path program 1 times [2021-12-07 01:16:44,633 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:16:44,634 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1274125271] [2021-12-07 01:16:44,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:44,635 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:16:44,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:44,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-07 01:16:44,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:44,806 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:16:44,807 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:16:44,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1274125271] [2021-12-07 01:16:44,807 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1274125271] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:16:44,813 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:16:44,813 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-07 01:16:44,815 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1020939232] [2021-12-07 01:16:44,815 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:16:44,818 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-07 01:16:44,818 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:16:44,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-07 01:16:44,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-07 01:16:44,841 INFO L87 Difference]: Start difference. First operand has 115 states, 84 states have (on average 1.369047619047619) internal successors, (115), 95 states have internal predecessors, (115), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:16:44,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:16:44,877 INFO L93 Difference]: Finished difference Result 221 states and 300 transitions. [2021-12-07 01:16:44,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-07 01:16:44,878 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-07 01:16:44,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:16:44,887 INFO L225 Difference]: With dead ends: 221 [2021-12-07 01:16:44,887 INFO L226 Difference]: Without dead ends: 106 [2021-12-07 01:16:44,891 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-07 01:16:44,894 INFO L933 BasicCegarLoop]: 147 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 01:16:44,895 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 01:16:44,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2021-12-07 01:16:44,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 106. [2021-12-07 01:16:44,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 87 states have internal predecessors, (101), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-07 01:16:44,934 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 138 transitions. [2021-12-07 01:16:44,936 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 138 transitions. Word has length 25 [2021-12-07 01:16:44,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:16:44,936 INFO L470 AbstractCegarLoop]: Abstraction has 106 states and 138 transitions. [2021-12-07 01:16:44,937 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:16:44,937 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 138 transitions. [2021-12-07 01:16:44,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-07 01:16:44,940 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:16:44,940 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:44,940 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-07 01:16:44,941 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:16:44,941 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:16:44,942 INFO L85 PathProgramCache]: Analyzing trace with hash -298822754, now seen corresponding path program 1 times [2021-12-07 01:16:44,942 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:16:44,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1330460922] [2021-12-07 01:16:44,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:44,943 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:16:44,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-07 01:16:45,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,017 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:16:45,017 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:16:45,018 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1330460922] [2021-12-07 01:16:45,018 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1330460922] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:16:45,018 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:16:45,018 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 01:16:45,018 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1120831846] [2021-12-07 01:16:45,019 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:16:45,020 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-07 01:16:45,020 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:16:45,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 01:16:45,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 01:16:45,021 INFO L87 Difference]: Start difference. First operand 106 states and 138 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:16:45,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:16:45,043 INFO L93 Difference]: Finished difference Result 172 states and 224 transitions. [2021-12-07 01:16:45,044 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 01:16:45,044 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-07 01:16:45,044 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:16:45,046 INFO L225 Difference]: With dead ends: 172 [2021-12-07 01:16:45,046 INFO L226 Difference]: Without dead ends: 97 [2021-12-07 01:16:45,048 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 01:16:45,049 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 17 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 01:16:45,050 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 228 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 01:16:45,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2021-12-07 01:16:45,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2021-12-07 01:16:45,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-07 01:16:45,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 126 transitions. [2021-12-07 01:16:45,065 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 126 transitions. Word has length 26 [2021-12-07 01:16:45,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:16:45,065 INFO L470 AbstractCegarLoop]: Abstraction has 97 states and 126 transitions. [2021-12-07 01:16:45,066 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:16:45,066 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 126 transitions. [2021-12-07 01:16:45,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-07 01:16:45,068 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:16:45,068 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:45,068 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-07 01:16:45,068 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:16:45,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:16:45,069 INFO L85 PathProgramCache]: Analyzing trace with hash -1504880537, now seen corresponding path program 1 times [2021-12-07 01:16:45,069 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:16:45,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [579495469] [2021-12-07 01:16:45,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:45,070 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:16:45,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-07 01:16:45,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,128 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:16:45,128 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:16:45,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [579495469] [2021-12-07 01:16:45,129 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [579495469] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:16:45,129 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:16:45,129 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 01:16:45,129 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1732765168] [2021-12-07 01:16:45,129 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:16:45,129 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-07 01:16:45,130 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:16:45,130 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 01:16:45,130 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 01:16:45,130 INFO L87 Difference]: Start difference. First operand 97 states and 126 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:16:45,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:16:45,194 INFO L93 Difference]: Finished difference Result 229 states and 301 transitions. [2021-12-07 01:16:45,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-07 01:16:45,195 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-07 01:16:45,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:16:45,197 INFO L225 Difference]: With dead ends: 229 [2021-12-07 01:16:45,197 INFO L226 Difference]: Without dead ends: 140 [2021-12-07 01:16:45,198 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-07 01:16:45,199 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 191 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 414 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 01:16:45,199 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [191 Valid, 414 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 01:16:45,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140 states. [2021-12-07 01:16:45,212 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140 to 137. [2021-12-07 01:16:45,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137 states, 101 states have (on average 1.3465346534653466) internal successors, (136), 114 states have internal predecessors, (136), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2021-12-07 01:16:45,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 179 transitions. [2021-12-07 01:16:45,214 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 179 transitions. Word has length 31 [2021-12-07 01:16:45,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:16:45,214 INFO L470 AbstractCegarLoop]: Abstraction has 137 states and 179 transitions. [2021-12-07 01:16:45,215 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:16:45,215 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 179 transitions. [2021-12-07 01:16:45,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-07 01:16:45,216 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:16:45,216 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:45,217 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-07 01:16:45,217 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:16:45,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:16:45,217 INFO L85 PathProgramCache]: Analyzing trace with hash -1902279984, now seen corresponding path program 1 times [2021-12-07 01:16:45,217 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:16:45,217 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [955559148] [2021-12-07 01:16:45,218 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:45,218 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:16:45,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-07 01:16:45,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,270 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 01:16:45,271 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:16:45,271 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [955559148] [2021-12-07 01:16:45,271 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [955559148] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:16:45,271 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:16:45,271 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 01:16:45,271 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [865239747] [2021-12-07 01:16:45,271 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:16:45,272 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-07 01:16:45,272 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:16:45,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 01:16:45,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 01:16:45,273 INFO L87 Difference]: Start difference. First operand 137 states and 179 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:16:45,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:16:45,322 INFO L93 Difference]: Finished difference Result 320 states and 430 transitions. [2021-12-07 01:16:45,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-07 01:16:45,322 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-07 01:16:45,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:16:45,325 INFO L225 Difference]: With dead ends: 320 [2021-12-07 01:16:45,325 INFO L226 Difference]: Without dead ends: 191 [2021-12-07 01:16:45,326 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-07 01:16:45,327 INFO L933 BasicCegarLoop]: 129 mSDtfsCounter, 76 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 470 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 01:16:45,328 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 470 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 01:16:45,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2021-12-07 01:16:45,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 181. [2021-12-07 01:16:45,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 181 states, 134 states have (on average 1.2761194029850746) internal successors, (171), 146 states have internal predecessors, (171), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) [2021-12-07 01:16:45,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 229 transitions. [2021-12-07 01:16:45,347 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 229 transitions. Word has length 34 [2021-12-07 01:16:45,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:16:45,347 INFO L470 AbstractCegarLoop]: Abstraction has 181 states and 229 transitions. [2021-12-07 01:16:45,348 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-07 01:16:45,348 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 229 transitions. [2021-12-07 01:16:45,350 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-07 01:16:45,350 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:16:45,350 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:45,350 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-07 01:16:45,350 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:16:45,351 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:16:45,351 INFO L85 PathProgramCache]: Analyzing trace with hash -469168825, now seen corresponding path program 1 times [2021-12-07 01:16:45,351 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:16:45,351 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [241750867] [2021-12-07 01:16:45,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:45,359 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:16:45,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-07 01:16:45,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:16:45,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-07 01:16:45,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 01:16:45,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-07 01:16:45,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,445 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 01:16:45,445 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:16:45,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [241750867] [2021-12-07 01:16:45,445 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [241750867] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:16:45,446 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:16:45,446 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 01:16:45,446 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [23456474] [2021-12-07 01:16:45,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:16:45,446 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-07 01:16:45,447 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:16:45,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-07 01:16:45,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-07 01:16:45,447 INFO L87 Difference]: Start difference. First operand 181 states and 229 transitions. Second operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-07 01:16:45,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:16:45,628 INFO L93 Difference]: Finished difference Result 393 states and 510 transitions. [2021-12-07 01:16:45,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-07 01:16:45,629 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2021-12-07 01:16:45,629 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:16:45,632 INFO L225 Difference]: With dead ends: 393 [2021-12-07 01:16:45,632 INFO L226 Difference]: Without dead ends: 220 [2021-12-07 01:16:45,633 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=38, Invalid=94, Unknown=0, NotChecked=0, Total=132 [2021-12-07 01:16:45,634 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 121 mSDsluCounter, 508 mSDsCounter, 0 mSdLazyCounter, 217 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 644 SdHoareTripleChecker+Invalid, 251 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 217 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 01:16:45,635 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [129 Valid, 644 Invalid, 251 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 217 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 01:16:45,636 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2021-12-07 01:16:45,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 211. [2021-12-07 01:16:45,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 157 states have (on average 1.2547770700636942) internal successors, (197), 169 states have internal predecessors, (197), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2021-12-07 01:16:45,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 262 transitions. [2021-12-07 01:16:45,660 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 262 transitions. Word has length 65 [2021-12-07 01:16:45,660 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:16:45,661 INFO L470 AbstractCegarLoop]: Abstraction has 211 states and 262 transitions. [2021-12-07 01:16:45,661 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-07 01:16:45,661 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 262 transitions. [2021-12-07 01:16:45,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-12-07 01:16:45,664 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:16:45,664 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:45,664 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-07 01:16:45,664 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:16:45,665 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:16:45,665 INFO L85 PathProgramCache]: Analyzing trace with hash 197377234, now seen corresponding path program 1 times [2021-12-07 01:16:45,665 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:16:45,665 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1142745800] [2021-12-07 01:16:45,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:45,666 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:16:45,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-07 01:16:45,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:16:45,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-07 01:16:45,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 01:16:45,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-07 01:16:45,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,752 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 01:16:45,752 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:16:45,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1142745800] [2021-12-07 01:16:45,752 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1142745800] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:16:45,753 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:16:45,753 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 01:16:45,753 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [336905626] [2021-12-07 01:16:45,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:16:45,754 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-07 01:16:45,754 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:16:45,754 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 01:16:45,754 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 01:16:45,755 INFO L87 Difference]: Start difference. First operand 211 states and 262 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-07 01:16:45,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:16:45,862 INFO L93 Difference]: Finished difference Result 424 states and 540 transitions. [2021-12-07 01:16:45,862 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-07 01:16:45,863 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2021-12-07 01:16:45,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:16:45,864 INFO L225 Difference]: With dead ends: 424 [2021-12-07 01:16:45,864 INFO L226 Difference]: Without dead ends: 221 [2021-12-07 01:16:45,865 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-07 01:16:45,866 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 81 mSDsluCounter, 235 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 01:16:45,866 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [87 Valid, 345 Invalid, 132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 01:16:45,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2021-12-07 01:16:45,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 213. [2021-12-07 01:16:45,879 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 159 states have (on average 1.251572327044025) internal successors, (199), 171 states have internal predecessors, (199), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2021-12-07 01:16:45,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 264 transitions. [2021-12-07 01:16:45,881 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 264 transitions. Word has length 62 [2021-12-07 01:16:45,881 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:16:45,881 INFO L470 AbstractCegarLoop]: Abstraction has 213 states and 264 transitions. [2021-12-07 01:16:45,881 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-07 01:16:45,881 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 264 transitions. [2021-12-07 01:16:45,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-12-07 01:16:45,883 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:16:45,883 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:45,883 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-07 01:16:45,883 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:16:45,884 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:16:45,884 INFO L85 PathProgramCache]: Analyzing trace with hash -646628268, now seen corresponding path program 1 times [2021-12-07 01:16:45,884 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:16:45,884 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [861868206] [2021-12-07 01:16:45,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:45,884 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:16:45,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-07 01:16:45,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:16:45,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-07 01:16:45,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 01:16:45,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-07 01:16:45,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:45,951 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 01:16:45,951 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:16:45,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [861868206] [2021-12-07 01:16:45,951 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [861868206] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:16:45,951 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:16:45,951 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-07 01:16:45,951 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [196609308] [2021-12-07 01:16:45,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:16:45,952 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-07 01:16:45,952 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:16:45,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-07 01:16:45,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-07 01:16:45,952 INFO L87 Difference]: Start difference. First operand 213 states and 264 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-07 01:16:46,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:16:46,122 INFO L93 Difference]: Finished difference Result 621 states and 797 transitions. [2021-12-07 01:16:46,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-07 01:16:46,122 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 62 [2021-12-07 01:16:46,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:16:46,125 INFO L225 Difference]: With dead ends: 621 [2021-12-07 01:16:46,125 INFO L226 Difference]: Without dead ends: 416 [2021-12-07 01:16:46,126 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-07 01:16:46,126 INFO L933 BasicCegarLoop]: 166 mSDtfsCounter, 247 mSDsluCounter, 214 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 255 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 258 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 01:16:46,127 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [255 Valid, 380 Invalid, 258 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 01:16:46,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 416 states. [2021-12-07 01:16:46,149 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 416 to 414. [2021-12-07 01:16:46,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 310 states have (on average 1.229032258064516) internal successors, (381), 330 states have internal predecessors, (381), 53 states have call successors, (53), 48 states have call predecessors, (53), 50 states have return successors, (80), 53 states have call predecessors, (80), 53 states have call successors, (80) [2021-12-07 01:16:46,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 514 transitions. [2021-12-07 01:16:46,152 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 514 transitions. Word has length 62 [2021-12-07 01:16:46,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:16:46,153 INFO L470 AbstractCegarLoop]: Abstraction has 414 states and 514 transitions. [2021-12-07 01:16:46,153 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-07 01:16:46,153 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 514 transitions. [2021-12-07 01:16:46,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-12-07 01:16:46,154 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:16:46,154 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:46,154 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-07 01:16:46,154 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:16:46,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:16:46,155 INFO L85 PathProgramCache]: Analyzing trace with hash -938683346, now seen corresponding path program 1 times [2021-12-07 01:16:46,155 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:16:46,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1548072999] [2021-12-07 01:16:46,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:46,155 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:16:46,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:46,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 01:16:46,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:46,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-07 01:16:46,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:46,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:16:46,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:46,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-07 01:16:46,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:46,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 01:16:46,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:46,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-07 01:16:46,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:46,263 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 01:16:46,263 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:16:46,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1548072999] [2021-12-07 01:16:46,263 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1548072999] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:16:46,263 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 01:16:46,264 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-07 01:16:46,264 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1481412858] [2021-12-07 01:16:46,264 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:16:46,264 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-07 01:16:46,264 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:16:46,265 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-07 01:16:46,265 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2021-12-07 01:16:46,265 INFO L87 Difference]: Start difference. First operand 414 states and 514 transitions. Second operand has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-07 01:16:46,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:16:46,857 INFO L93 Difference]: Finished difference Result 1325 states and 1713 transitions. [2021-12-07 01:16:46,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-07 01:16:46,858 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2021-12-07 01:16:46,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:16:46,863 INFO L225 Difference]: With dead ends: 1325 [2021-12-07 01:16:46,863 INFO L226 Difference]: Without dead ends: 919 [2021-12-07 01:16:46,865 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2021-12-07 01:16:46,866 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 399 mSDsluCounter, 624 mSDsCounter, 0 mSdLazyCounter, 909 mSolverCounterSat, 213 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 408 SdHoareTripleChecker+Valid, 743 SdHoareTripleChecker+Invalid, 1122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 213 IncrementalHoareTripleChecker+Valid, 909 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-07 01:16:46,866 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [408 Valid, 743 Invalid, 1122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [213 Valid, 909 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-07 01:16:46,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 919 states. [2021-12-07 01:16:46,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 919 to 861. [2021-12-07 01:16:46,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 861 states, 634 states have (on average 1.1987381703470033) internal successors, (760), 682 states have internal predecessors, (760), 119 states have call successors, (119), 94 states have call predecessors, (119), 107 states have return successors, (203), 118 states have call predecessors, (203), 119 states have call successors, (203) [2021-12-07 01:16:46,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 861 states to 861 states and 1082 transitions. [2021-12-07 01:16:46,916 INFO L78 Accepts]: Start accepts. Automaton has 861 states and 1082 transitions. Word has length 66 [2021-12-07 01:16:46,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:16:46,916 INFO L470 AbstractCegarLoop]: Abstraction has 861 states and 1082 transitions. [2021-12-07 01:16:46,916 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-07 01:16:46,916 INFO L276 IsEmpty]: Start isEmpty. Operand 861 states and 1082 transitions. [2021-12-07 01:16:46,919 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2021-12-07 01:16:46,919 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 01:16:46,920 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:46,920 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-07 01:16:46,920 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 01:16:46,920 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 01:16:46,920 INFO L85 PathProgramCache]: Analyzing trace with hash 1166861276, now seen corresponding path program 1 times [2021-12-07 01:16:46,920 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 01:16:46,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [834128251] [2021-12-07 01:16:46,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:46,921 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 01:16:46,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:46,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 01:16:46,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:46,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-07 01:16:46,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-07 01:16:47,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:16:47,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-07 01:16:47,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 01:16:47,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-07 01:16:47,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-07 01:16:47,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-12-07 01:16:47,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 01:16:47,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-07 01:16:47,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-07 01:16:47,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 01:16:47,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-07 01:16:47,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,099 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-12-07 01:16:47,100 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 01:16:47,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [834128251] [2021-12-07 01:16:47,100 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [834128251] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-07 01:16:47,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [444255342] [2021-12-07 01:16:47,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 01:16:47,100 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-07 01:16:47,100 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 01:16:47,101 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-07 01:16:47,102 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-07 01:16:47,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 01:16:47,185 INFO L263 TraceCheckSpWp]: Trace formula consists of 542 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-07 01:16:47,193 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-07 01:16:47,438 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-07 01:16:47,438 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-07 01:16:47,438 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [444255342] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 01:16:47,438 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-07 01:16:47,438 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2021-12-07 01:16:47,438 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1132909399] [2021-12-07 01:16:47,439 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 01:16:47,439 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-07 01:16:47,439 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 01:16:47,440 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-07 01:16:47,440 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2021-12-07 01:16:47,440 INFO L87 Difference]: Start difference. First operand 861 states and 1082 transitions. Second operand has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-07 01:16:47,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 01:16:47,601 INFO L93 Difference]: Finished difference Result 1922 states and 2405 transitions. [2021-12-07 01:16:47,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-07 01:16:47,602 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 125 [2021-12-07 01:16:47,603 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 01:16:47,604 INFO L225 Difference]: With dead ends: 1922 [2021-12-07 01:16:47,604 INFO L226 Difference]: Without dead ends: 0 [2021-12-07 01:16:47,610 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 145 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2021-12-07 01:16:47,610 INFO L933 BasicCegarLoop]: 217 mSDtfsCounter, 83 mSDsluCounter, 754 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 971 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 01:16:47,611 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [87 Valid, 971 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 01:16:47,611 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-07 01:16:47,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-07 01:16:47,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 01:16:47,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-07 01:16:47,612 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 125 [2021-12-07 01:16:47,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 01:16:47,612 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-07 01:16:47,613 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-07 01:16:47,613 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-07 01:16:47,613 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-07 01:16:47,615 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-07 01:16:47,638 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-07 01:16:47,816 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2021-12-07 01:16:47,818 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-07 01:16:50,184 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 238 245) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2021-12-07 01:16:50,185 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 238 245) no Hoare annotation was computed. [2021-12-07 01:16:50,185 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 238 245) no Hoare annotation was computed. [2021-12-07 01:16:50,185 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 128 134) no Hoare annotation was computed. [2021-12-07 01:16:50,185 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 128 134) the Hoare annotation is: true [2021-12-07 01:16:50,185 INFO L854 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-07 01:16:50,185 INFO L854 garLoopResultBuilder]: At program point L172(line 172) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-07 01:16:50,185 INFO L858 garLoopResultBuilder]: For program point L170(lines 170 178) no Hoare annotation was computed. [2021-12-07 01:16:50,185 INFO L854 garLoopResultBuilder]: At program point L583(lines 578 586) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-07 01:16:50,185 INFO L858 garLoopResultBuilder]: For program point L166(lines 166 183) no Hoare annotation was computed. [2021-12-07 01:16:50,185 INFO L854 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2021-12-07 01:16:50,185 INFO L858 garLoopResultBuilder]: For program point L181-1(lines 162 186) no Hoare annotation was computed. [2021-12-07 01:16:50,186 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 162 186) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-07 01:16:50,186 INFO L854 garLoopResultBuilder]: At program point L336(lines 321 339) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-07 01:16:50,186 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 162 186) no Hoare annotation was computed. [2021-12-07 01:16:50,186 INFO L858 garLoopResultBuilder]: For program point L330(lines 330 334) no Hoare annotation was computed. [2021-12-07 01:16:50,186 INFO L858 garLoopResultBuilder]: For program point L330-2(lines 330 334) no Hoare annotation was computed. [2021-12-07 01:16:50,186 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 511 522) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1) (or (<= 1 ~methaneLevelCritical~0) .cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2021-12-07 01:16:50,186 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 511 522) no Hoare annotation was computed. [2021-12-07 01:16:50,186 INFO L858 garLoopResultBuilder]: For program point L515-1(lines 511 522) no Hoare annotation was computed. [2021-12-07 01:16:50,186 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 589 618) no Hoare annotation was computed. [2021-12-07 01:16:50,186 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 589 618) the Hoare annotation is: true [2021-12-07 01:16:50,186 INFO L858 garLoopResultBuilder]: For program point L603(lines 603 607) no Hoare annotation was computed. [2021-12-07 01:16:50,186 INFO L861 garLoopResultBuilder]: At program point L603-1(lines 603 607) the Hoare annotation is: true [2021-12-07 01:16:50,186 INFO L858 garLoopResultBuilder]: For program point L600(line 600) no Hoare annotation was computed. [2021-12-07 01:16:50,187 INFO L861 garLoopResultBuilder]: At program point L599-2(lines 599 613) the Hoare annotation is: true [2021-12-07 01:16:50,187 INFO L861 garLoopResultBuilder]: At program point L595(line 595) the Hoare annotation is: true [2021-12-07 01:16:50,187 INFO L858 garLoopResultBuilder]: For program point L595-1(line 595) no Hoare annotation was computed. [2021-12-07 01:16:50,187 INFO L861 garLoopResultBuilder]: At program point L614(lines 589 618) the Hoare annotation is: true [2021-12-07 01:16:50,187 INFO L858 garLoopResultBuilder]: For program point L610(line 610) no Hoare annotation was computed. [2021-12-07 01:16:50,187 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 523 531) the Hoare annotation is: true [2021-12-07 01:16:50,187 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 523 531) no Hoare annotation was computed. [2021-12-07 01:16:50,187 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 523 531) no Hoare annotation was computed. [2021-12-07 01:16:50,187 INFO L858 garLoopResultBuilder]: For program point L192(lines 192 209) no Hoare annotation was computed. [2021-12-07 01:16:50,187 INFO L858 garLoopResultBuilder]: For program point L440(line 440) no Hoare annotation was computed. [2021-12-07 01:16:50,187 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 104 127) no Hoare annotation was computed. [2021-12-07 01:16:50,187 INFO L854 garLoopResultBuilder]: At program point L441(lines 436 443) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or .cse3 .cse1))) [2021-12-07 01:16:50,187 INFO L858 garLoopResultBuilder]: For program point L115-1(lines 115 121) no Hoare annotation was computed. [2021-12-07 01:16:50,187 INFO L858 garLoopResultBuilder]: For program point L466(lines 466 476) no Hoare annotation was computed. [2021-12-07 01:16:50,188 INFO L858 garLoopResultBuilder]: For program point L462(lines 462 479) no Hoare annotation was computed. [2021-12-07 01:16:50,188 INFO L854 garLoopResultBuilder]: At program point L462-1(lines 454 482) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~7#1| 0)) (.cse2 (not .cse3)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4) .cse5 (and (<= 2 ~waterLevel~0) .cse4) (and .cse1 .cse4 .cse2) .cse3) (or .cse6 .cse5 (and .cse1 .cse4) .cse2) (or .cse6 (and .cse1 .cse7) .cse0) (or .cse6 .cse5 .cse7)))) [2021-12-07 01:16:50,188 INFO L858 garLoopResultBuilder]: For program point L491(lines 491 495) no Hoare annotation was computed. [2021-12-07 01:16:50,188 INFO L854 garLoopResultBuilder]: At program point L202(line 202) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse1))) [2021-12-07 01:16:50,188 INFO L854 garLoopResultBuilder]: At program point L491-2(lines 487 498) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2021-12-07 01:16:50,188 INFO L854 garLoopResultBuilder]: At program point L198(line 198) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse0 .cse2) (or .cse2 (and .cse3 (<= 1 |timeShift_processEnvironment_~tmp~2#1|)) .cse4) (or .cse3 .cse1 .cse4))) [2021-12-07 01:16:50,188 INFO L854 garLoopResultBuilder]: At program point L194(line 194) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2021-12-07 01:16:50,188 INFO L858 garLoopResultBuilder]: For program point L194-1(line 194) no Hoare annotation was computed. [2021-12-07 01:16:50,188 INFO L858 garLoopResultBuilder]: For program point L467(lines 467 473) no Hoare annotation was computed. [2021-12-07 01:16:50,188 INFO L854 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not .cse4)) (.cse9 (<= 1 ~methaneLevelCritical~0))) (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not .cse9)) (.cse8 (and .cse1 .cse2 .cse9 .cse3 .cse6))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4) (or .cse5 .cse0 .cse6) (or .cse5 .cse7 .cse8) (or .cse7 .cse8 .cse4))))) [2021-12-07 01:16:50,188 INFO L854 garLoopResultBuilder]: At program point L207-1(lines 188 212) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= |old(~waterLevel~0)| ~waterLevel~0) (not .cse5))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse4) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (<= 2 ~waterLevel~0) .cse2 .cse5)))) [2021-12-07 01:16:50,188 INFO L858 garLoopResultBuilder]: For program point L108-1(lines 107 126) no Hoare annotation was computed. [2021-12-07 01:16:50,189 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 104 127) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6)) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2)))) [2021-12-07 01:16:50,189 INFO L854 garLoopResultBuilder]: At program point L460(line 460) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse4 .cse6)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse4 .cse5 .cse3) (or .cse0 .cse1 .cse5) (or .cse0 .cse2 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 2 ~waterLevel~0) .cse2 .cse3)))) [2021-12-07 01:16:50,189 INFO L858 garLoopResultBuilder]: For program point L460-1(line 460) no Hoare annotation was computed. [2021-12-07 01:16:50,189 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 104 127) no Hoare annotation was computed. [2021-12-07 01:16:50,189 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 440) no Hoare annotation was computed. [2021-12-07 01:16:50,189 INFO L854 garLoopResultBuilder]: At program point L262(lines 257 265) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or (and .cse2 .cse3) .cse4 .cse5) (or .cse0 .cse4 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse1 .cse5))) [2021-12-07 01:16:50,189 INFO L858 garLoopResultBuilder]: For program point L196(lines 196 204) no Hoare annotation was computed. [2021-12-07 01:16:50,189 INFO L858 garLoopResultBuilder]: For program point L671(lines 671 678) no Hoare annotation was computed. [2021-12-07 01:16:50,189 INFO L858 garLoopResultBuilder]: For program point L415(lines 415 421) no Hoare annotation was computed. [2021-12-07 01:16:50,189 INFO L854 garLoopResultBuilder]: At program point L415-2(lines 407 422) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse4) (and .cse6 .cse2 .cse3 .cse4 .cse5))) [2021-12-07 01:16:50,189 INFO L858 garLoopResultBuilder]: For program point L671-2(lines 671 678) no Hoare annotation was computed. [2021-12-07 01:16:50,189 INFO L858 garLoopResultBuilder]: For program point L378(lines 377 426) no Hoare annotation was computed. [2021-12-07 01:16:50,190 INFO L858 garLoopResultBuilder]: For program point L407(lines 407 422) no Hoare annotation was computed. [2021-12-07 01:16:50,190 INFO L854 garLoopResultBuilder]: At program point L399(line 399) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-07 01:16:50,190 INFO L854 garLoopResultBuilder]: At program point L424(lines 377 426) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-07 01:16:50,190 INFO L861 garLoopResultBuilder]: At program point L680(lines 661 683) the Hoare annotation is: true [2021-12-07 01:16:50,190 INFO L854 garLoopResultBuilder]: At program point L647(lines 643 649) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:16:50,190 INFO L858 garLoopResultBuilder]: For program point L387(lines 387 393) no Hoare annotation was computed. [2021-12-07 01:16:50,190 INFO L858 garLoopResultBuilder]: For program point L387-1(lines 387 393) no Hoare annotation was computed. [2021-12-07 01:16:50,190 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-07 01:16:50,190 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-07 01:16:50,190 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-07 01:16:50,190 INFO L858 garLoopResultBuilder]: For program point L379(lines 379 383) no Hoare annotation was computed. [2021-12-07 01:16:50,190 INFO L854 garLoopResultBuilder]: At program point L346(line 346) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2021-12-07 01:16:50,190 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-07 01:16:50,190 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:16:50,191 INFO L861 garLoopResultBuilder]: At program point L430(lines 367 434) the Hoare annotation is: true [2021-12-07 01:16:50,191 INFO L858 garLoopResultBuilder]: For program point L397(lines 397 403) no Hoare annotation was computed. [2021-12-07 01:16:50,191 INFO L858 garLoopResultBuilder]: For program point L397-1(lines 397 403) no Hoare annotation was computed. [2021-12-07 01:16:50,191 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:16:50,191 INFO L854 garLoopResultBuilder]: At program point L360(lines 355 362) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2021-12-07 01:16:50,191 INFO L854 garLoopResultBuilder]: At program point L389(line 389) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-07 01:16:50,191 INFO L854 garLoopResultBuilder]: At program point L451(lines 446 453) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:16:50,191 INFO L854 garLoopResultBuilder]: At program point L352(lines 340 354) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4))) [2021-12-07 01:16:50,191 INFO L858 garLoopResultBuilder]: For program point L344(lines 344 350) no Hoare annotation was computed. [2021-12-07 01:16:50,191 INFO L858 garLoopResultBuilder]: For program point L344-1(lines 344 350) no Hoare annotation was computed. [2021-12-07 01:16:50,191 INFO L861 garLoopResultBuilder]: At program point L658(lines 650 660) the Hoare annotation is: true [2021-12-07 01:16:50,191 INFO L854 garLoopResultBuilder]: At program point L427(lines 376 428) the Hoare annotation is: false [2021-12-07 01:16:50,191 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-07 01:16:50,192 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 136 160) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-07 01:16:50,192 INFO L854 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-07 01:16:50,192 INFO L858 garLoopResultBuilder]: For program point L155-1(lines 136 160) no Hoare annotation was computed. [2021-12-07 01:16:50,192 INFO L858 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2021-12-07 01:16:50,192 INFO L858 garLoopResultBuilder]: For program point L228(lines 228 234) no Hoare annotation was computed. [2021-12-07 01:16:50,192 INFO L854 garLoopResultBuilder]: At program point L226(line 226) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse1) .cse2))) [2021-12-07 01:16:50,192 INFO L854 garLoopResultBuilder]: At program point L228-2(lines 221 237) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0)) (.cse0 (<= 2 ~waterLevel~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse1 (and (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~pumpRunning~0 0) .cse0)))) [2021-12-07 01:16:50,192 INFO L858 garLoopResultBuilder]: For program point L226-1(line 226) no Hoare annotation was computed. [2021-12-07 01:16:50,192 INFO L854 garLoopResultBuilder]: At program point L573(lines 564 577) the Hoare annotation is: (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse3 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse1) .cse2 (and .cse3 .cse0)) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse4 .cse0 .cse1) (and .cse3 .cse4 .cse0) (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2021-12-07 01:16:50,192 INFO L854 garLoopResultBuilder]: At program point L317(lines 302 320) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse0 (and .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not .cse4))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) .cse4) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse3) .cse4)))) [2021-12-07 01:16:50,192 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 136 160) no Hoare annotation was computed. [2021-12-07 01:16:50,192 INFO L854 garLoopResultBuilder]: At program point L218(lines 213 220) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-07 01:16:50,193 INFO L858 garLoopResultBuilder]: For program point L311(lines 311 315) no Hoare annotation was computed. [2021-12-07 01:16:50,193 INFO L854 garLoopResultBuilder]: At program point L150(line 150) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (not .cse0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1)))) [2021-12-07 01:16:50,193 INFO L858 garLoopResultBuilder]: For program point L311-2(lines 311 315) no Hoare annotation was computed. [2021-12-07 01:16:50,193 INFO L858 garLoopResultBuilder]: For program point L144(lines 144 152) no Hoare annotation was computed. [2021-12-07 01:16:50,193 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 157) no Hoare annotation was computed. [2021-12-07 01:16:50,193 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 499 510) no Hoare annotation was computed. [2021-12-07 01:16:50,193 INFO L858 garLoopResultBuilder]: For program point L503-1(lines 499 510) no Hoare annotation was computed. [2021-12-07 01:16:50,193 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 499 510) the Hoare annotation is: (let ((.cse2 (not (= ~pumpRunning~0 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse2 .cse0 .cse1))) [2021-12-07 01:16:50,193 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 246 256) the Hoare annotation is: true [2021-12-07 01:16:50,193 INFO L861 garLoopResultBuilder]: At program point L251(line 251) the Hoare annotation is: true [2021-12-07 01:16:50,193 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 246 256) no Hoare annotation was computed. [2021-12-07 01:16:50,193 INFO L858 garLoopResultBuilder]: For program point L251-1(line 251) no Hoare annotation was computed. [2021-12-07 01:16:50,193 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 246 256) no Hoare annotation was computed. [2021-12-07 01:16:50,196 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 01:16:50,197 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-07 01:16:50,216 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 01:16:50 BoogieIcfgContainer [2021-12-07 01:16:50,217 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-07 01:16:50,217 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-07 01:16:50,217 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-07 01:16:50,217 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-07 01:16:50,218 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:16:44" (3/4) ... [2021-12-07 01:16:50,220 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-07 01:16:50,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-07 01:16:50,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-07 01:16:50,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-07 01:16:50,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-07 01:16:50,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-07 01:16:50,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-07 01:16:50,225 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-07 01:16:50,225 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-07 01:16:50,225 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-07 01:16:50,225 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-07 01:16:50,232 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-12-07 01:16:50,232 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-07 01:16:50,233 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-07 01:16:50,233 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-07 01:16:50,234 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-07 01:16:50,234 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-07 01:16:50,235 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-07 01:16:50,251 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-07 01:16:50,251 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-07 01:16:50,252 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-07 01:16:50,252 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2021-12-07 01:16:50,252 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:16:50,253 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) && ((pumpRunning == 0 || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:16:50,253 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2021-12-07 01:16:50,253 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) [2021-12-07 01:16:50,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) [2021-12-07 01:16:50,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((pumpRunning == 0 && \result == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2021-12-07 01:16:50,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((methaneLevelCritical == tmp && pumpRunning == 0) && 2 <= waterLevel)) [2021-12-07 01:16:50,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:16:50,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:16:50,255 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:16:50,255 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2021-12-07 01:16:50,255 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-07 01:16:50,255 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) && !(0 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2021-12-07 01:16:50,277 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-07 01:16:50,278 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-07 01:16:50,278 INFO L158 Benchmark]: Toolchain (without parser) took 6479.49ms. Allocated memory was 115.3MB in the beginning and 167.8MB in the end (delta: 52.4MB). Free memory was 75.3MB in the beginning and 83.7MB in the end (delta: -8.4MB). Peak memory consumption was 43.4MB. Max. memory is 16.1GB. [2021-12-07 01:16:50,278 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 115.3MB. Free memory was 92.7MB in the beginning and 92.5MB in the end (delta: 117.7kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-07 01:16:50,279 INFO L158 Benchmark]: CACSL2BoogieTranslator took 306.27ms. Allocated memory is still 115.3MB. Free memory was 75.1MB in the beginning and 82.5MB in the end (delta: -7.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-07 01:16:50,279 INFO L158 Benchmark]: Boogie Procedure Inliner took 35.32ms. Allocated memory is still 115.3MB. Free memory was 82.5MB in the beginning and 79.9MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-07 01:16:50,279 INFO L158 Benchmark]: Boogie Preprocessor took 21.40ms. Allocated memory is still 115.3MB. Free memory was 79.9MB in the beginning and 78.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-07 01:16:50,279 INFO L158 Benchmark]: RCFGBuilder took 374.26ms. Allocated memory is still 115.3MB. Free memory was 77.8MB in the beginning and 60.4MB in the end (delta: 17.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2021-12-07 01:16:50,280 INFO L158 Benchmark]: TraceAbstraction took 5676.85ms. Allocated memory was 115.3MB in the beginning and 167.8MB in the end (delta: 52.4MB). Free memory was 59.9MB in the beginning and 91.1MB in the end (delta: -31.1MB). Peak memory consumption was 72.2MB. Max. memory is 16.1GB. [2021-12-07 01:16:50,280 INFO L158 Benchmark]: Witness Printer took 60.58ms. Allocated memory is still 167.8MB. Free memory was 91.1MB in the beginning and 83.7MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-07 01:16:50,281 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 115.3MB. Free memory was 92.7MB in the beginning and 92.5MB in the end (delta: 117.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 306.27ms. Allocated memory is still 115.3MB. Free memory was 75.1MB in the beginning and 82.5MB in the end (delta: -7.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 35.32ms. Allocated memory is still 115.3MB. Free memory was 82.5MB in the beginning and 79.9MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 21.40ms. Allocated memory is still 115.3MB. Free memory was 79.9MB in the beginning and 78.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 374.26ms. Allocated memory is still 115.3MB. Free memory was 77.8MB in the beginning and 60.4MB in the end (delta: 17.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 5676.85ms. Allocated memory was 115.3MB in the beginning and 167.8MB in the end (delta: 52.4MB). Free memory was 59.9MB in the beginning and 91.1MB in the end (delta: -31.1MB). Peak memory consumption was 72.2MB. Max. memory is 16.1GB. * Witness Printer took 60.58ms. Allocated memory is still 167.8MB. Free memory was 91.1MB in the beginning and 83.7MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 440]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 115 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.6s, OverallIterations: 9, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1254 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1215 mSDsluCounter, 4342 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3055 mSDsCounter, 390 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1578 IncrementalHoareTripleChecker+Invalid, 1968 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 390 mSolverCounterUnsat, 1287 mSDtfsCounter, 1578 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 306 GetRequests, 220 SyntacticMatches, 1 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 310 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=861occurred in iteration=8, InterpolantAutomatonStates: 75, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 9 MinimizatonAttempts, 90 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 53 LocationsWithAnnotation, 1603 PreInvPairs, 2008 NumberOfFragments, 1692 HoareAnnotationTreeSize, 1603 FomulaSimplifications, 3694 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 53 FomulaSimplificationsInter, 15059 FormulaSimplificationTreeSizeReductionInter, 2.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 621 NumberOfCodeBlocks, 621 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 611 ConstructedInterpolants, 0 QuantifiedInterpolants, 1003 SizeOfPredicates, 3 NumberOfNonLiveVariables, 542 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 10 InterpolantComputations, 9 PerfectInterpolantSequences, 107/110 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 213]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 377]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) && ((pumpRunning == 0 || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 367]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 355]: Loop Invariant Derived loop invariant: ((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 578]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 643]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 661]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((methaneLevelCritical == tmp && pumpRunning == 0) && 2 <= waterLevel)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((pumpRunning == 0 && \result == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 650]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 321]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 302]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) && !(0 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 454]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 446]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2021-12-07 01:16:50,323 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a449ee07-b3c7-4c4c-9c70-2bd82c08d9f3/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE