./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 458689bcd0930e2b07a61b7490d83be8ce4e59412b26a60581bf78c492ee412e --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 18:38:54,554 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 18:38:54,555 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 18:38:54,579 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 18:38:54,580 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 18:38:54,581 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 18:38:54,582 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 18:38:54,584 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 18:38:54,586 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 18:38:54,587 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 18:38:54,587 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 18:38:54,588 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 18:38:54,589 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 18:38:54,590 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 18:38:54,591 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 18:38:54,592 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 18:38:54,593 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 18:38:54,594 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 18:38:54,595 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 18:38:54,597 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 18:38:54,599 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 18:38:54,600 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 18:38:54,602 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 18:38:54,603 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 18:38:54,607 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 18:38:54,607 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 18:38:54,608 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 18:38:54,609 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 18:38:54,609 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 18:38:54,610 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 18:38:54,611 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 18:38:54,612 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 18:38:54,613 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 18:38:54,613 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 18:38:54,614 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 18:38:54,615 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 18:38:54,615 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 18:38:54,616 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 18:38:54,616 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 18:38:54,617 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 18:38:54,617 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 18:38:54,618 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 18:38:54,643 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 18:38:54,643 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 18:38:54,644 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 18:38:54,644 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 18:38:54,645 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 18:38:54,645 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 18:38:54,645 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 18:38:54,646 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 18:38:54,646 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 18:38:54,646 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 18:38:54,646 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 18:38:54,646 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 18:38:54,647 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 18:38:54,647 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 18:38:54,647 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 18:38:54,647 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 18:38:54,647 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 18:38:54,648 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 18:38:54,648 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 18:38:54,648 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 18:38:54,671 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 18:38:54,672 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 18:38:54,672 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 18:38:54,672 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 18:38:54,672 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 18:38:54,673 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 18:38:54,673 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 18:38:54,673 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 18:38:54,673 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 18:38:54,673 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 18:38:54,674 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 18:38:54,674 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 18:38:54,674 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 18:38:54,674 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 18:38:54,674 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 458689bcd0930e2b07a61b7490d83be8ce4e59412b26a60581bf78c492ee412e [2021-12-06 18:38:54,858 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 18:38:54,877 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 18:38:54,880 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 18:38:54,881 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 18:38:54,882 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 18:38:54,883 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c [2021-12-06 18:38:54,926 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/data/dacb98161/04673cf2f89147119acb198d9b4bbc0d/FLAGc3896304c [2021-12-06 18:38:55,387 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 18:38:55,387 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c [2021-12-06 18:38:55,396 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/data/dacb98161/04673cf2f89147119acb198d9b4bbc0d/FLAGc3896304c [2021-12-06 18:38:55,406 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/data/dacb98161/04673cf2f89147119acb198d9b4bbc0d [2021-12-06 18:38:55,408 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 18:38:55,409 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 18:38:55,410 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 18:38:55,410 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 18:38:55,413 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 18:38:55,413 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,414 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@190be89a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55, skipping insertion in model container [2021-12-06 18:38:55,414 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,419 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 18:38:55,447 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 18:38:55,650 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c[18431,18444] [2021-12-06 18:38:55,653 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 18:38:55,662 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 18:38:55,725 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c[18431,18444] [2021-12-06 18:38:55,726 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 18:38:55,742 INFO L208 MainTranslator]: Completed translation [2021-12-06 18:38:55,742 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55 WrapperNode [2021-12-06 18:38:55,742 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 18:38:55,743 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 18:38:55,743 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 18:38:55,743 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 18:38:55,749 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,763 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,787 INFO L137 Inliner]: procedures = 55, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 253 [2021-12-06 18:38:55,787 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 18:38:55,788 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 18:38:55,788 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 18:38:55,788 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 18:38:55,802 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,803 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,806 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,806 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,815 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,820 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,822 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,824 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 18:38:55,825 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 18:38:55,825 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 18:38:55,825 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 18:38:55,826 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (1/1) ... [2021-12-06 18:38:55,833 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 18:38:55,845 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 18:38:55,856 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 18:38:55,858 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 18:38:55,885 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 18:38:55,886 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 18:38:55,886 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 18:38:55,886 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 18:38:55,886 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 18:38:55,886 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 18:38:55,886 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 18:38:55,886 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-06 18:38:55,886 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-06 18:38:55,886 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 18:38:55,886 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 18:38:55,886 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 18:38:55,886 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 18:38:55,886 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-06 18:38:55,887 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-06 18:38:55,887 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 18:38:55,887 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 18:38:55,887 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 18:38:55,887 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 18:38:55,887 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 18:38:55,942 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 18:38:55,943 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 18:38:56,154 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 18:38:56,160 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 18:38:56,160 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 18:38:56,161 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 06:38:56 BoogieIcfgContainer [2021-12-06 18:38:56,161 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 18:38:56,163 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 18:38:56,163 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 18:38:56,166 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 18:38:56,166 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 06:38:55" (1/3) ... [2021-12-06 18:38:56,167 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1fee2e94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 06:38:56, skipping insertion in model container [2021-12-06 18:38:56,167 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 06:38:55" (2/3) ... [2021-12-06 18:38:56,167 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1fee2e94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 06:38:56, skipping insertion in model container [2021-12-06 18:38:56,167 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 06:38:56" (3/3) ... [2021-12-06 18:38:56,168 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product46.cil.c [2021-12-06 18:38:56,172 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 18:38:56,172 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 18:38:56,211 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 18:38:56,216 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 18:38:56,217 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 18:38:56,233 INFO L276 IsEmpty]: Start isEmpty. Operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-06 18:38:56,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-06 18:38:56,241 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:56,242 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:56,243 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:56,248 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:56,249 INFO L85 PathProgramCache]: Analyzing trace with hash -1887688965, now seen corresponding path program 1 times [2021-12-06 18:38:56,257 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:56,258 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [693755610] [2021-12-06 18:38:56,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:56,258 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:56,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 18:38:56,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,407 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:38:56,407 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:56,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [693755610] [2021-12-06 18:38:56,408 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [693755610] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:56,408 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:56,409 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 18:38:56,410 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [855597971] [2021-12-06 18:38:56,410 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:56,413 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 18:38:56,413 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:56,432 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 18:38:56,433 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 18:38:56,435 INFO L87 Difference]: Start difference. First operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:38:56,460 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:56,460 INFO L93 Difference]: Finished difference Result 184 states and 249 transitions. [2021-12-06 18:38:56,461 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 18:38:56,462 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-06 18:38:56,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:56,469 INFO L225 Difference]: With dead ends: 184 [2021-12-06 18:38:56,469 INFO L226 Difference]: Without dead ends: 87 [2021-12-06 18:38:56,472 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 18:38:56,475 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:56,476 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 18:38:56,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2021-12-06 18:38:56,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2021-12-06 18:38:56,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-06 18:38:56,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 112 transitions. [2021-12-06 18:38:56,510 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 112 transitions. Word has length 25 [2021-12-06 18:38:56,510 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:56,510 INFO L470 AbstractCegarLoop]: Abstraction has 87 states and 112 transitions. [2021-12-06 18:38:56,510 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:38:56,510 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2021-12-06 18:38:56,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-06 18:38:56,512 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:56,512 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:56,513 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 18:38:56,513 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:56,514 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:56,514 INFO L85 PathProgramCache]: Analyzing trace with hash -2062523597, now seen corresponding path program 1 times [2021-12-06 18:38:56,514 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:56,514 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1015773233] [2021-12-06 18:38:56,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:56,514 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:56,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-06 18:38:56,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:38:56,568 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:56,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1015773233] [2021-12-06 18:38:56,568 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1015773233] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:56,568 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:56,568 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 18:38:56,569 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [40745282] [2021-12-06 18:38:56,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:56,570 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 18:38:56,570 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:56,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 18:38:56,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 18:38:56,571 INFO L87 Difference]: Start difference. First operand 87 states and 112 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:38:56,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:56,583 INFO L93 Difference]: Finished difference Result 139 states and 179 transitions. [2021-12-06 18:38:56,584 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 18:38:56,584 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-06 18:38:56,584 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:56,585 INFO L225 Difference]: With dead ends: 139 [2021-12-06 18:38:56,585 INFO L226 Difference]: Without dead ends: 78 [2021-12-06 18:38:56,586 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 18:38:56,587 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 13 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:56,588 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 181 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 18:38:56,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2021-12-06 18:38:56,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2021-12-06 18:38:56,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-06 18:38:56,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 100 transitions. [2021-12-06 18:38:56,597 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 100 transitions. Word has length 26 [2021-12-06 18:38:56,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:56,597 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 100 transitions. [2021-12-06 18:38:56,597 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:38:56,597 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2021-12-06 18:38:56,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-06 18:38:56,598 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:56,598 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:56,599 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 18:38:56,599 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:56,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:56,599 INFO L85 PathProgramCache]: Analyzing trace with hash -89675643, now seen corresponding path program 1 times [2021-12-06 18:38:56,599 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:56,600 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [806372394] [2021-12-06 18:38:56,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:56,600 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:56,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 18:38:56,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,677 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:38:56,677 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:56,677 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [806372394] [2021-12-06 18:38:56,678 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [806372394] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:56,678 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:56,678 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 18:38:56,678 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [488128232] [2021-12-06 18:38:56,678 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:56,678 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 18:38:56,678 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:56,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 18:38:56,679 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-06 18:38:56,679 INFO L87 Difference]: Start difference. First operand 78 states and 100 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:38:56,752 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:56,753 INFO L93 Difference]: Finished difference Result 149 states and 194 transitions. [2021-12-06 18:38:56,753 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 18:38:56,753 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-06 18:38:56,753 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:56,754 INFO L225 Difference]: With dead ends: 149 [2021-12-06 18:38:56,754 INFO L226 Difference]: Without dead ends: 78 [2021-12-06 18:38:56,755 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 18:38:56,756 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 125 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:56,756 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [125 Valid, 207 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 18:38:56,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2021-12-06 18:38:56,764 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2021-12-06 18:38:56,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-06 18:38:56,765 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2021-12-06 18:38:56,766 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 31 [2021-12-06 18:38:56,766 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:56,766 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2021-12-06 18:38:56,766 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 18:38:56,766 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2021-12-06 18:38:56,767 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-06 18:38:56,767 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:56,768 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:56,768 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 18:38:56,768 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:56,768 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:56,768 INFO L85 PathProgramCache]: Analyzing trace with hash -106405387, now seen corresponding path program 1 times [2021-12-06 18:38:56,768 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:56,769 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [233344371] [2021-12-06 18:38:56,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:56,769 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:56,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 18:38:56,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 18:38:56,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 18:38:56,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:56,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:38:56,829 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:56,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [233344371] [2021-12-06 18:38:56,829 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [233344371] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:56,829 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:56,829 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 18:38:56,830 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394125916] [2021-12-06 18:38:56,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:56,830 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 18:38:56,830 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:56,831 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 18:38:56,831 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 18:38:56,831 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-06 18:38:56,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:56,956 INFO L93 Difference]: Finished difference Result 233 states and 295 transitions. [2021-12-06 18:38:56,957 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 18:38:56,957 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2021-12-06 18:38:56,957 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:56,959 INFO L225 Difference]: With dead ends: 233 [2021-12-06 18:38:56,959 INFO L226 Difference]: Without dead ends: 162 [2021-12-06 18:38:56,960 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-06 18:38:56,961 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 187 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:56,961 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [189 Valid, 316 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:38:56,962 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2021-12-06 18:38:56,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 156. [2021-12-06 18:38:56,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 119 states have (on average 1.2605042016806722) internal successors, (150), 127 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-06 18:38:56,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 191 transitions. [2021-12-06 18:38:56,978 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 191 transitions. Word has length 41 [2021-12-06 18:38:56,978 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:56,978 INFO L470 AbstractCegarLoop]: Abstraction has 156 states and 191 transitions. [2021-12-06 18:38:56,978 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-06 18:38:56,979 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 191 transitions. [2021-12-06 18:38:56,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-06 18:38:56,980 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:56,980 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:56,980 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 18:38:56,980 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:56,981 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:56,981 INFO L85 PathProgramCache]: Analyzing trace with hash -822814067, now seen corresponding path program 1 times [2021-12-06 18:38:56,981 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:56,981 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [222554561] [2021-12-06 18:38:56,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:56,981 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:56,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 18:38:57,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:38:57,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-06 18:38:57,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,042 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:38:57,042 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:57,042 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [222554561] [2021-12-06 18:38:57,042 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [222554561] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:57,042 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:57,042 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 18:38:57,043 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1646318879] [2021-12-06 18:38:57,043 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:57,043 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 18:38:57,043 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:57,043 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 18:38:57,044 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 18:38:57,044 INFO L87 Difference]: Start difference. First operand 156 states and 191 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-06 18:38:57,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:57,205 INFO L93 Difference]: Finished difference Result 405 states and 515 transitions. [2021-12-06 18:38:57,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 18:38:57,206 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-12-06 18:38:57,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:57,208 INFO L225 Difference]: With dead ends: 405 [2021-12-06 18:38:57,208 INFO L226 Difference]: Without dead ends: 256 [2021-12-06 18:38:57,209 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-06 18:38:57,210 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 138 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 160 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 160 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:57,211 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [145 Valid, 385 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 160 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:38:57,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2021-12-06 18:38:57,233 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 248. [2021-12-06 18:38:57,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 248 states, 189 states have (on average 1.2486772486772486) internal successors, (236), 200 states have internal predecessors, (236), 30 states have call successors, (30), 26 states have call predecessors, (30), 28 states have return successors, (40), 30 states have call predecessors, (40), 30 states have call successors, (40) [2021-12-06 18:38:57,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 306 transitions. [2021-12-06 18:38:57,236 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 306 transitions. Word has length 47 [2021-12-06 18:38:57,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:57,237 INFO L470 AbstractCegarLoop]: Abstraction has 248 states and 306 transitions. [2021-12-06 18:38:57,237 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-06 18:38:57,237 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 306 transitions. [2021-12-06 18:38:57,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-06 18:38:57,239 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:57,239 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:57,239 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 18:38:57,239 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:57,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:57,240 INFO L85 PathProgramCache]: Analyzing trace with hash 688456935, now seen corresponding path program 1 times [2021-12-06 18:38:57,240 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:57,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [394457441] [2021-12-06 18:38:57,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:57,240 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:57,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:38:57,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 18:38:57,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:38:57,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-06 18:38:57,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:38:57,323 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:57,324 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [394457441] [2021-12-06 18:38:57,324 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [394457441] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:57,324 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:57,324 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 18:38:57,324 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [130370873] [2021-12-06 18:38:57,324 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:57,325 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 18:38:57,325 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:57,326 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 18:38:57,326 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-06 18:38:57,326 INFO L87 Difference]: Start difference. First operand 248 states and 306 transitions. Second operand has 8 states, 8 states have (on average 5.25) internal successors, (42), 6 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 18:38:57,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:57,634 INFO L93 Difference]: Finished difference Result 606 states and 779 transitions. [2021-12-06 18:38:57,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-06 18:38:57,635 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 6 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 51 [2021-12-06 18:38:57,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:57,639 INFO L225 Difference]: With dead ends: 606 [2021-12-06 18:38:57,639 INFO L226 Difference]: Without dead ends: 457 [2021-12-06 18:38:57,640 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 96 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=141, Invalid=365, Unknown=0, NotChecked=0, Total=506 [2021-12-06 18:38:57,641 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 382 mSDsluCounter, 289 mSDsCounter, 0 mSdLazyCounter, 314 mSolverCounterSat, 151 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 387 SdHoareTripleChecker+Valid, 390 SdHoareTripleChecker+Invalid, 465 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 151 IncrementalHoareTripleChecker+Valid, 314 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:57,641 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [387 Valid, 390 Invalid, 465 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [151 Valid, 314 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 18:38:57,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 457 states. [2021-12-06 18:38:57,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 457 to 411. [2021-12-06 18:38:57,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 411 states, 312 states have (on average 1.2243589743589745) internal successors, (382), 332 states have internal predecessors, (382), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2021-12-06 18:38:57,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 411 states to 411 states and 509 transitions. [2021-12-06 18:38:57,681 INFO L78 Accepts]: Start accepts. Automaton has 411 states and 509 transitions. Word has length 51 [2021-12-06 18:38:57,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:57,682 INFO L470 AbstractCegarLoop]: Abstraction has 411 states and 509 transitions. [2021-12-06 18:38:57,682 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 6 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 18:38:57,682 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 509 transitions. [2021-12-06 18:38:57,684 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-06 18:38:57,684 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:57,684 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:57,684 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 18:38:57,684 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:57,685 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:57,685 INFO L85 PathProgramCache]: Analyzing trace with hash 554443429, now seen corresponding path program 1 times [2021-12-06 18:38:57,685 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:57,685 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1556077096] [2021-12-06 18:38:57,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:57,685 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:57,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:38:57,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 18:38:57,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:38:57,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-06 18:38:57,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,739 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:38:57,740 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:57,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1556077096] [2021-12-06 18:38:57,740 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1556077096] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:57,740 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:57,740 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 18:38:57,740 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1492106650] [2021-12-06 18:38:57,740 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:57,741 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 18:38:57,741 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:57,741 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 18:38:57,741 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 18:38:57,742 INFO L87 Difference]: Start difference. First operand 411 states and 509 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:38:57,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:57,925 INFO L93 Difference]: Finished difference Result 761 states and 949 transitions. [2021-12-06 18:38:57,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 18:38:57,926 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2021-12-06 18:38:57,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:57,928 INFO L225 Difference]: With dead ends: 761 [2021-12-06 18:38:57,929 INFO L226 Difference]: Without dead ends: 445 [2021-12-06 18:38:57,930 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2021-12-06 18:38:57,930 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 161 mSDsluCounter, 243 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 360 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:57,931 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [164 Valid, 360 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:38:57,932 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 445 states. [2021-12-06 18:38:57,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 445 to 411. [2021-12-06 18:38:57,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 411 states, 312 states have (on average 1.2211538461538463) internal successors, (381), 332 states have internal predecessors, (381), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2021-12-06 18:38:57,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 411 states to 411 states and 508 transitions. [2021-12-06 18:38:57,956 INFO L78 Accepts]: Start accepts. Automaton has 411 states and 508 transitions. Word has length 51 [2021-12-06 18:38:57,956 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:57,956 INFO L470 AbstractCegarLoop]: Abstraction has 411 states and 508 transitions. [2021-12-06 18:38:57,957 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:38:57,957 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 508 transitions. [2021-12-06 18:38:57,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-06 18:38:57,958 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:57,958 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:57,958 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 18:38:57,958 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:57,959 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:57,959 INFO L85 PathProgramCache]: Analyzing trace with hash 773298147, now seen corresponding path program 1 times [2021-12-06 18:38:57,959 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:57,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [550839562] [2021-12-06 18:38:57,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:57,959 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:57,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:38:57,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:57,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 18:38:57,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:38:58,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-06 18:38:58,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,012 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:38:58,012 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:58,012 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [550839562] [2021-12-06 18:38:58,012 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [550839562] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:58,012 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:58,012 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 18:38:58,013 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558457503] [2021-12-06 18:38:58,013 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:58,013 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 18:38:58,013 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:58,014 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 18:38:58,014 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 18:38:58,014 INFO L87 Difference]: Start difference. First operand 411 states and 508 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:38:58,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:58,187 INFO L93 Difference]: Finished difference Result 844 states and 1055 transitions. [2021-12-06 18:38:58,188 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 18:38:58,188 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2021-12-06 18:38:58,188 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:58,191 INFO L225 Difference]: With dead ends: 844 [2021-12-06 18:38:58,191 INFO L226 Difference]: Without dead ends: 440 [2021-12-06 18:38:58,193 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-06 18:38:58,194 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 163 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 227 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 413 SdHoareTripleChecker+Invalid, 277 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 227 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:58,194 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 413 Invalid, 277 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 227 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:38:58,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 440 states. [2021-12-06 18:38:58,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 440 to 414. [2021-12-06 18:38:58,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 317 states have (on average 1.2145110410094637) internal successors, (385), 336 states have internal predecessors, (385), 49 states have call successors, (49), 38 states have call predecessors, (49), 47 states have return successors, (76), 50 states have call predecessors, (76), 49 states have call successors, (76) [2021-12-06 18:38:58,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 510 transitions. [2021-12-06 18:38:58,226 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 510 transitions. Word has length 51 [2021-12-06 18:38:58,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:58,226 INFO L470 AbstractCegarLoop]: Abstraction has 414 states and 510 transitions. [2021-12-06 18:38:58,226 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 18:38:58,226 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 510 transitions. [2021-12-06 18:38:58,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-06 18:38:58,227 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:58,228 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:58,228 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 18:38:58,228 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:58,228 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:58,228 INFO L85 PathProgramCache]: Analyzing trace with hash 271087281, now seen corresponding path program 1 times [2021-12-06 18:38:58,228 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:58,228 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569275264] [2021-12-06 18:38:58,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:58,229 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:58,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:38:58,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 18:38:58,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:38:58,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 18:38:58,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-06 18:38:58,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,310 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-06 18:38:58,311 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:58,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569275264] [2021-12-06 18:38:58,311 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569275264] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 18:38:58,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [565248326] [2021-12-06 18:38:58,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:58,311 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 18:38:58,311 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 18:38:58,314 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 18:38:58,314 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 18:38:58,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,376 INFO L263 TraceCheckSpWp]: Trace formula consists of 386 conjuncts, 17 conjunts are in the unsatisfiable core [2021-12-06 18:38:58,383 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 18:38:58,569 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 18:38:58,569 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 18:38:58,569 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [565248326] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:58,569 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 18:38:58,569 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-12-06 18:38:58,570 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134203322] [2021-12-06 18:38:58,570 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:58,570 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 18:38:58,570 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:58,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 18:38:58,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2021-12-06 18:38:58,571 INFO L87 Difference]: Start difference. First operand 414 states and 510 transitions. Second operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 18:38:58,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:58,692 INFO L93 Difference]: Finished difference Result 1211 states and 1518 transitions. [2021-12-06 18:38:58,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 18:38:58,693 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2021-12-06 18:38:58,693 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:58,699 INFO L225 Difference]: With dead ends: 1211 [2021-12-06 18:38:58,699 INFO L226 Difference]: Without dead ends: 804 [2021-12-06 18:38:58,701 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2021-12-06 18:38:58,701 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 58 mSDsluCounter, 473 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 581 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:58,702 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [62 Valid, 581 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:38:58,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 804 states. [2021-12-06 18:38:58,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 804 to 802. [2021-12-06 18:38:58,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 802 states, 612 states have (on average 1.2026143790849673) internal successors, (736), 646 states have internal predecessors, (736), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (154), 98 states have call predecessors, (154), 97 states have call successors, (154) [2021-12-06 18:38:58,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 802 states to 802 states and 987 transitions. [2021-12-06 18:38:58,747 INFO L78 Accepts]: Start accepts. Automaton has 802 states and 987 transitions. Word has length 60 [2021-12-06 18:38:58,747 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:58,748 INFO L470 AbstractCegarLoop]: Abstraction has 802 states and 987 transitions. [2021-12-06 18:38:58,748 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 18:38:58,748 INFO L276 IsEmpty]: Start isEmpty. Operand 802 states and 987 transitions. [2021-12-06 18:38:58,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-06 18:38:58,750 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:58,750 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:58,784 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 18:38:58,950 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 18:38:58,951 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:58,951 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:58,951 INFO L85 PathProgramCache]: Analyzing trace with hash -907258435, now seen corresponding path program 1 times [2021-12-06 18:38:58,951 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:58,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [272617230] [2021-12-06 18:38:58,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:58,952 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:58,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:38:58,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:58,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 18:38:59,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:38:59,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 18:38:59,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 18:38:59,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,018 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 18:38:59,018 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:59,018 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [272617230] [2021-12-06 18:38:59,018 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [272617230] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:59,018 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:59,018 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 18:38:59,019 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [967781067] [2021-12-06 18:38:59,019 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:59,019 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 18:38:59,019 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:59,020 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 18:38:59,020 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 18:38:59,020 INFO L87 Difference]: Start difference. First operand 802 states and 987 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 18:38:59,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:38:59,262 INFO L93 Difference]: Finished difference Result 1611 states and 1980 transitions. [2021-12-06 18:38:59,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 18:38:59,263 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2021-12-06 18:38:59,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:38:59,267 INFO L225 Difference]: With dead ends: 1611 [2021-12-06 18:38:59,267 INFO L226 Difference]: Without dead ends: 816 [2021-12-06 18:38:59,269 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2021-12-06 18:38:59,270 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 210 mSDsluCounter, 375 mSDsCounter, 0 mSdLazyCounter, 318 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 213 SdHoareTripleChecker+Valid, 531 SdHoareTripleChecker+Invalid, 386 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 318 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 18:38:59,270 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [213 Valid, 531 Invalid, 386 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 318 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 18:38:59,272 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 816 states. [2021-12-06 18:38:59,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 816 to 802. [2021-12-06 18:38:59,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 802 states, 612 states have (on average 1.1862745098039216) internal successors, (726), 646 states have internal predecessors, (726), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (139), 98 states have call predecessors, (139), 97 states have call successors, (139) [2021-12-06 18:38:59,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 802 states to 802 states and 962 transitions. [2021-12-06 18:38:59,306 INFO L78 Accepts]: Start accepts. Automaton has 802 states and 962 transitions. Word has length 61 [2021-12-06 18:38:59,306 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:38:59,306 INFO L470 AbstractCegarLoop]: Abstraction has 802 states and 962 transitions. [2021-12-06 18:38:59,306 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 18:38:59,306 INFO L276 IsEmpty]: Start isEmpty. Operand 802 states and 962 transitions. [2021-12-06 18:38:59,307 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-06 18:38:59,307 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:38:59,308 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:38:59,308 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-06 18:38:59,308 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:38:59,308 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:38:59,308 INFO L85 PathProgramCache]: Analyzing trace with hash -662505803, now seen corresponding path program 1 times [2021-12-06 18:38:59,308 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:38:59,308 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1779384281] [2021-12-06 18:38:59,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:38:59,309 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:38:59,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:38:59,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-06 18:38:59,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 18:38:59,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:38:59,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 18:38:59,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2021-12-06 18:38:59,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:38:59,396 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-06 18:38:59,396 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:38:59,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1779384281] [2021-12-06 18:38:59,397 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1779384281] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:38:59,397 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:38:59,397 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-06 18:38:59,397 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [787854029] [2021-12-06 18:38:59,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:38:59,397 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-06 18:38:59,398 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:38:59,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-06 18:38:59,398 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2021-12-06 18:38:59,398 INFO L87 Difference]: Start difference. First operand 802 states and 962 transitions. Second operand has 12 states, 12 states have (on average 4.25) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 5 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 18:39:00,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:39:00,066 INFO L93 Difference]: Finished difference Result 1598 states and 1936 transitions. [2021-12-06 18:39:00,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-06 18:39:00,067 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 5 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 64 [2021-12-06 18:39:00,067 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:39:00,071 INFO L225 Difference]: With dead ends: 1598 [2021-12-06 18:39:00,071 INFO L226 Difference]: Without dead ends: 803 [2021-12-06 18:39:00,073 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 288 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=262, Invalid=1070, Unknown=0, NotChecked=0, Total=1332 [2021-12-06 18:39:00,074 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 345 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 1117 mSolverCounterSat, 204 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 346 SdHoareTripleChecker+Valid, 501 SdHoareTripleChecker+Invalid, 1321 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 204 IncrementalHoareTripleChecker+Valid, 1117 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 18:39:00,074 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [346 Valid, 501 Invalid, 1321 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [204 Valid, 1117 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 18:39:00,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 803 states. [2021-12-06 18:39:00,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 803 to 770. [2021-12-06 18:39:00,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 580 states have (on average 1.1551724137931034) internal successors, (670), 614 states have internal predecessors, (670), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (133), 98 states have call predecessors, (133), 97 states have call successors, (133) [2021-12-06 18:39:00,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 900 transitions. [2021-12-06 18:39:00,109 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 900 transitions. Word has length 64 [2021-12-06 18:39:00,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:39:00,109 INFO L470 AbstractCegarLoop]: Abstraction has 770 states and 900 transitions. [2021-12-06 18:39:00,109 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 5 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 18:39:00,109 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 900 transitions. [2021-12-06 18:39:00,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-06 18:39:00,112 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:39:00,112 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:39:00,113 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-06 18:39:00,113 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:39:00,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:39:00,113 INFO L85 PathProgramCache]: Analyzing trace with hash 2101060045, now seen corresponding path program 1 times [2021-12-06 18:39:00,113 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:39:00,113 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1818907520] [2021-12-06 18:39:00,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:39:00,114 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:39:00,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 18:39:00,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 18:39:00,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:39:00,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 18:39:00,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-06 18:39:00,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2021-12-06 18:39:00,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-06 18:39:00,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 18:39:00,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 18:39:00,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,184 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-12-06 18:39:00,184 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:39:00,185 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1818907520] [2021-12-06 18:39:00,185 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1818907520] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:39:00,185 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 18:39:00,185 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 18:39:00,185 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [961283337] [2021-12-06 18:39:00,185 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:39:00,185 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 18:39:00,186 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:39:00,186 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 18:39:00,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-06 18:39:00,186 INFO L87 Difference]: Start difference. First operand 770 states and 900 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-06 18:39:00,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:39:00,373 INFO L93 Difference]: Finished difference Result 1537 states and 1816 transitions. [2021-12-06 18:39:00,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 18:39:00,374 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 99 [2021-12-06 18:39:00,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:39:00,378 INFO L225 Difference]: With dead ends: 1537 [2021-12-06 18:39:00,378 INFO L226 Difference]: Without dead ends: 774 [2021-12-06 18:39:00,380 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2021-12-06 18:39:00,381 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 136 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 410 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 18:39:00,381 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [144 Valid, 410 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 18:39:00,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 774 states. [2021-12-06 18:39:00,416 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 774 to 770. [2021-12-06 18:39:00,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 580 states have (on average 1.1482758620689655) internal successors, (666), 614 states have internal predecessors, (666), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (133), 98 states have call predecessors, (133), 97 states have call successors, (133) [2021-12-06 18:39:00,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 896 transitions. [2021-12-06 18:39:00,421 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 896 transitions. Word has length 99 [2021-12-06 18:39:00,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:39:00,422 INFO L470 AbstractCegarLoop]: Abstraction has 770 states and 896 transitions. [2021-12-06 18:39:00,422 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-06 18:39:00,422 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 896 transitions. [2021-12-06 18:39:00,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-06 18:39:00,425 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:39:00,425 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:39:00,425 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-12-06 18:39:00,425 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:39:00,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:39:00,426 INFO L85 PathProgramCache]: Analyzing trace with hash -1306684405, now seen corresponding path program 1 times [2021-12-06 18:39:00,426 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:39:00,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [638017900] [2021-12-06 18:39:00,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:39:00,426 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:39:00,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 18:39:00,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 18:39:00,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:39:00,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 18:39:00,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-06 18:39:00,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2021-12-06 18:39:00,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-06 18:39:00,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 18:39:00,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 18:39:00,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,547 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 18:39:00,547 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:39:00,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [638017900] [2021-12-06 18:39:00,548 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [638017900] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 18:39:00,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [731516105] [2021-12-06 18:39:00,548 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:39:00,548 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 18:39:00,548 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 18:39:00,549 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 18:39:00,550 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-06 18:39:00,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:00,616 INFO L263 TraceCheckSpWp]: Trace formula consists of 482 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 18:39:00,620 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 18:39:00,730 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-12-06 18:39:00,731 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 18:39:00,731 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [731516105] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 18:39:00,731 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 18:39:00,731 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [15] total 17 [2021-12-06 18:39:00,731 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [540642167] [2021-12-06 18:39:00,731 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 18:39:00,731 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 18:39:00,732 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:39:00,732 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 18:39:00,732 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=237, Unknown=0, NotChecked=0, Total=272 [2021-12-06 18:39:00,732 INFO L87 Difference]: Start difference. First operand 770 states and 896 transitions. Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-06 18:39:00,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:39:00,767 INFO L93 Difference]: Finished difference Result 1389 states and 1635 transitions. [2021-12-06 18:39:00,768 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 18:39:00,768 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) Word has length 99 [2021-12-06 18:39:00,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:39:00,771 INFO L225 Difference]: With dead ends: 1389 [2021-12-06 18:39:00,771 INFO L226 Difference]: Without dead ends: 626 [2021-12-06 18:39:00,772 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 131 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=267, Unknown=0, NotChecked=0, Total=306 [2021-12-06 18:39:00,773 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 11 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 18:39:00,773 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11 Valid, 282 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 18:39:00,774 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2021-12-06 18:39:00,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 626. [2021-12-06 18:39:00,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 626 states, 470 states have (on average 1.148936170212766) internal successors, (540), 498 states have internal predecessors, (540), 81 states have call successors, (81), 64 states have call predecessors, (81), 74 states have return successors, (103), 78 states have call predecessors, (103), 81 states have call successors, (103) [2021-12-06 18:39:00,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 626 states to 626 states and 724 transitions. [2021-12-06 18:39:00,800 INFO L78 Accepts]: Start accepts. Automaton has 626 states and 724 transitions. Word has length 99 [2021-12-06 18:39:00,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:39:00,800 INFO L470 AbstractCegarLoop]: Abstraction has 626 states and 724 transitions. [2021-12-06 18:39:00,800 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-06 18:39:00,801 INFO L276 IsEmpty]: Start isEmpty. Operand 626 states and 724 transitions. [2021-12-06 18:39:00,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-06 18:39:00,802 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 18:39:00,802 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:39:00,822 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-06 18:39:01,003 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-12-06 18:39:01,003 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 18:39:01,003 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 18:39:01,003 INFO L85 PathProgramCache]: Analyzing trace with hash 1686740425, now seen corresponding path program 1 times [2021-12-06 18:39:01,003 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 18:39:01,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [501957983] [2021-12-06 18:39:01,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:39:01,004 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 18:39:01,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 18:39:01,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 18:39:01,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 18:39:01,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 18:39:01,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 18:39:01,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-06 18:39:01,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-06 18:39:01,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 18:39:01,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 18:39:01,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,110 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 18:39:01,110 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 18:39:01,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [501957983] [2021-12-06 18:39:01,111 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [501957983] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 18:39:01,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [57883442] [2021-12-06 18:39:01,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 18:39:01,111 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 18:39:01,111 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 18:39:01,112 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 18:39:01,113 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-06 18:39:01,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 18:39:01,179 INFO L263 TraceCheckSpWp]: Trace formula consists of 482 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-06 18:39:01,183 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 18:39:01,346 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 18:39:01,346 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 18:39:01,543 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-06 18:39:01,543 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [57883442] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 18:39:01,544 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 18:39:01,544 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 9] total 22 [2021-12-06 18:39:01,544 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1203704473] [2021-12-06 18:39:01,544 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 18:39:01,544 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-12-06 18:39:01,545 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 18:39:01,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-12-06 18:39:01,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2021-12-06 18:39:01,545 INFO L87 Difference]: Start difference. First operand 626 states and 724 transitions. Second operand has 22 states, 22 states have (on average 6.454545454545454) internal successors, (142), 15 states have internal predecessors, (142), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2021-12-06 18:39:02,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 18:39:02,500 INFO L93 Difference]: Finished difference Result 1312 states and 1568 transitions. [2021-12-06 18:39:02,500 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2021-12-06 18:39:02,500 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 6.454545454545454) internal successors, (142), 15 states have internal predecessors, (142), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) Word has length 99 [2021-12-06 18:39:02,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 18:39:02,501 INFO L225 Difference]: With dead ends: 1312 [2021-12-06 18:39:02,501 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 18:39:02,505 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 280 GetRequests, 212 SyntacticMatches, 1 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1152 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=1065, Invalid=3627, Unknown=0, NotChecked=0, Total=4692 [2021-12-06 18:39:02,505 INFO L933 BasicCegarLoop]: 80 mSDtfsCounter, 914 mSDsluCounter, 580 mSDsCounter, 0 mSdLazyCounter, 1090 mSolverCounterSat, 460 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 916 SdHoareTripleChecker+Valid, 660 SdHoareTripleChecker+Invalid, 1550 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 460 IncrementalHoareTripleChecker+Valid, 1090 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-06 18:39:02,506 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [916 Valid, 660 Invalid, 1550 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [460 Valid, 1090 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-06 18:39:02,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 18:39:02,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 18:39:02,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 18:39:02,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 18:39:02,506 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 99 [2021-12-06 18:39:02,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 18:39:02,507 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 18:39:02,507 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 6.454545454545454) internal successors, (142), 15 states have internal predecessors, (142), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2021-12-06 18:39:02,507 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 18:39:02,507 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 18:39:02,515 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 18:39:02,536 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-12-06 18:39:02,716 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-12-06 18:39:02,719 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 18:39:05,813 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 720 726) no Hoare annotation was computed. [2021-12-06 18:39:05,813 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 720 726) the Hoare annotation is: true [2021-12-06 18:39:05,813 INFO L858 garLoopResultBuilder]: For program point L626-1(lines 622 633) no Hoare annotation was computed. [2021-12-06 18:39:05,814 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 622 633) the Hoare annotation is: (let ((.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (not (= ~pumpRunning~0 1))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse1 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse4) (or .cse6 .cse0 .cse1 .cse2 .cse4))) [2021-12-06 18:39:05,814 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 622 633) no Hoare annotation was computed. [2021-12-06 18:39:05,814 INFO L854 garLoopResultBuilder]: At program point L671(lines 666 674) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse9 (<= ~waterLevel~0 1)) (.cse14 (= 1 ~systemActive~0)) (.cse0 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (<= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse15 .cse9 .cse14 .cse0 .cse1 .cse11)) (.cse6 (not .cse15)) (.cse2 (= ~pumpRunning~0 1)) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not .cse14)) (.cse13 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5 .cse6) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6 (= |timeShift_getWaterLevel_#res#1| 1)) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse5 .cse6 .cse8 (and .cse9 .cse0 .cse10 .cse11 .cse2) .cse7 (and .cse12 .cse9 .cse0 .cse10 .cse11))) (or .cse5 .cse13 .cse8 .cse7) (or .cse3 .cse5 .cse13 .cse7)))) [2021-12-06 18:39:05,814 INFO L854 garLoopResultBuilder]: At program point L828(lines 823 831) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse0 .cse1) (or .cse0 .cse5 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse3) (or .cse4 .cse0 .cse1 (and (= |timeShift_isPumpRunning_#res#1| 1) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse3))) [2021-12-06 18:39:05,814 INFO L858 garLoopResultBuilder]: For program point L700-1(lines 699 718) no Hoare annotation was computed. [2021-12-06 18:39:05,814 INFO L858 garLoopResultBuilder]: For program point L762(lines 762 770) no Hoare annotation was computed. [2021-12-06 18:39:05,814 INFO L858 garLoopResultBuilder]: For program point L758(lines 758 775) no Hoare annotation was computed. [2021-12-06 18:39:05,815 INFO L858 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2021-12-06 18:39:05,815 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 696 719) no Hoare annotation was computed. [2021-12-06 18:39:05,815 INFO L858 garLoopResultBuilder]: For program point L69(lines 69 82) no Hoare annotation was computed. [2021-12-06 18:39:05,815 INFO L854 garLoopResultBuilder]: At program point L69-1(lines 54 86) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse12 (<= ~waterLevel~0 1)) (.cse16 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse14 (= 1 ~systemActive~0)) (.cse17 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0))) (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not .cse17)) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse11 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse14)) (.cse8 (not .cse15)) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse15 .cse12 .cse14 .cse16 .cse17 .cse4 .cse18)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6) (or .cse7 .cse0 .cse1 .cse8 .cse9) (or .cse7 .cse1 .cse2 .cse10 .cse11) (or (and .cse12 .cse5 .cse13) .cse1 .cse2 .cse10 (and .cse0 .cse3 .cse12 .cse14 .cse5) .cse6) (or .cse7 .cse1 .cse8 .cse10 .cse11) (or (and .cse15 .cse12 .cse16 .cse17 .cse18 .cse13) .cse1 .cse8 .cse10 .cse6 (and .cse0 .cse3 .cse12 .cse14 .cse16 .cse17 .cse18)) (or .cse0 .cse1 .cse8 .cse9 .cse6 (and .cse15 .cse17 .cse4 .cse13))))) [2021-12-06 18:39:05,815 INFO L854 garLoopResultBuilder]: At program point L61(line 61) the Hoare annotation is: (let ((.cse13 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse9 (= ~pumpRunning~0 1)) (.cse10 (= ~pumpRunning~0 0)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse12 (<= ~waterLevel~0 1)) (.cse14 (= 1 ~systemActive~0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10 .cse15 .cse12 .cse14 .cse8)) (.cse2 (not .cse15)) (.cse0 (and .cse12 .cse13 .cse9)) (.cse1 (not .cse14)) (.cse11 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (and .cse10 .cse12 .cse13)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse1 .cse2 .cse5 (and .cse8 .cse9)) (or .cse6 (and .cse10 .cse8) .cse1 .cse11 .cse5) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse1 .cse2) (or .cse0 .cse1 .cse11 .cse3 .cse4 .cse5)))) [2021-12-06 18:39:05,815 INFO L858 garLoopResultBuilder]: For program point L61-1(line 61) no Hoare annotation was computed. [2021-12-06 18:39:05,815 INFO L858 garLoopResultBuilder]: For program point L602(lines 602 606) no Hoare annotation was computed. [2021-12-06 18:39:05,815 INFO L854 garLoopResultBuilder]: At program point L602-2(lines 598 609) the Hoare annotation is: (let ((.cse4 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5 .cse6 .cse3) (or .cse4 .cse1 .cse2 .cse6 .cse3) (or .cse0 .cse1 .cse5 .cse3))) [2021-12-06 18:39:05,816 INFO L854 garLoopResultBuilder]: At program point L809(lines 804 811) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse6 .cse3) (or .cse1 .cse2 .cse5 .cse6 .cse3) (or .cse0 .cse1 .cse4 .cse3))) [2021-12-06 18:39:05,816 INFO L854 garLoopResultBuilder]: At program point L768(line 768) the Hoare annotation is: (let ((.cse4 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5 .cse6 .cse3) (or .cse4 .cse1 .cse2 .cse6 .cse3) (or .cse0 .cse1 .cse5 .cse3))) [2021-12-06 18:39:05,816 INFO L854 garLoopResultBuilder]: At program point L760(line 760) the Hoare annotation is: (let ((.cse4 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5 .cse6 .cse3) (or .cse4 .cse1 .cse2 .cse6 .cse3) (or .cse0 .cse1 .cse5 .cse3))) [2021-12-06 18:39:05,816 INFO L858 garLoopResultBuilder]: For program point L760-1(line 760) no Hoare annotation was computed. [2021-12-06 18:39:05,816 INFO L858 garLoopResultBuilder]: For program point L967(line 967) no Hoare annotation was computed. [2021-12-06 18:39:05,816 INFO L854 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse1 .cse3) (or .cse0 .cse6 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse6 .cse3))) [2021-12-06 18:39:05,816 INFO L854 garLoopResultBuilder]: At program point L773-1(lines 754 778) the Hoare annotation is: (let ((.cse13 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse9 (= ~pumpRunning~0 1)) (.cse10 (= ~pumpRunning~0 0)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse12 (<= ~waterLevel~0 1)) (.cse14 (= 1 ~systemActive~0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10 .cse15 .cse12 .cse14 .cse8)) (.cse2 (not .cse15)) (.cse0 (and .cse12 .cse13 .cse9)) (.cse1 (not .cse14)) (.cse11 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (and .cse10 .cse12 .cse13)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse1 .cse2 .cse5 (and .cse8 .cse9)) (or .cse6 (and .cse10 .cse8) .cse1 .cse11 .cse5) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse1 .cse2) (or .cse0 .cse1 .cse11 .cse3 .cse4 .cse5)))) [2021-12-06 18:39:05,816 INFO L858 garLoopResultBuilder]: For program point L707-1(lines 707 713) no Hoare annotation was computed. [2021-12-06 18:39:05,816 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 83) no Hoare annotation was computed. [2021-12-06 18:39:05,817 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 696 719) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse8)) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (and .cse8 (= ~pumpRunning~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse1 .cse3) (or .cse5 .cse6 .cse0 .cse7 .cse3) (or .cse0 .cse7 .cse2 .cse3 .cse4)))) [2021-12-06 18:39:05,817 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 696 719) no Hoare annotation was computed. [2021-12-06 18:39:05,817 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 967) no Hoare annotation was computed. [2021-12-06 18:39:05,817 INFO L854 garLoopResultBuilder]: At program point L968(lines 963 970) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse1 .cse5 .cse4 .cse3) (or .cse0 .cse1 .cse5 .cse3))) [2021-12-06 18:39:05,817 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 494 523) no Hoare annotation was computed. [2021-12-06 18:39:05,817 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 494 523) the Hoare annotation is: true [2021-12-06 18:39:05,817 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 512) no Hoare annotation was computed. [2021-12-06 18:39:05,817 INFO L861 garLoopResultBuilder]: At program point L508-1(lines 508 512) the Hoare annotation is: true [2021-12-06 18:39:05,817 INFO L858 garLoopResultBuilder]: For program point L505(line 505) no Hoare annotation was computed. [2021-12-06 18:39:05,817 INFO L861 garLoopResultBuilder]: At program point L504-2(lines 504 518) the Hoare annotation is: true [2021-12-06 18:39:05,818 INFO L861 garLoopResultBuilder]: At program point L500(line 500) the Hoare annotation is: true [2021-12-06 18:39:05,818 INFO L858 garLoopResultBuilder]: For program point L500-1(line 500) no Hoare annotation was computed. [2021-12-06 18:39:05,818 INFO L861 garLoopResultBuilder]: At program point L519(lines 494 523) the Hoare annotation is: true [2021-12-06 18:39:05,818 INFO L858 garLoopResultBuilder]: For program point L515(line 515) no Hoare annotation was computed. [2021-12-06 18:39:05,818 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 634 642) the Hoare annotation is: true [2021-12-06 18:39:05,818 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 634 642) no Hoare annotation was computed. [2021-12-06 18:39:05,818 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 634 642) no Hoare annotation was computed. [2021-12-06 18:39:05,818 INFO L858 garLoopResultBuilder]: For program point L944(lines 944 948) no Hoare annotation was computed. [2021-12-06 18:39:05,818 INFO L854 garLoopResultBuilder]: At program point L944-2(lines 936 949) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8))) [2021-12-06 18:39:05,818 INFO L858 garLoopResultBuilder]: For program point L907(lines 906 953) no Hoare annotation was computed. [2021-12-06 18:39:05,818 INFO L854 garLoopResultBuilder]: At program point L106(lines 102 108) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 18:39:05,818 INFO L858 garLoopResultBuilder]: For program point L936(lines 936 949) no Hoare annotation was computed. [2021-12-06 18:39:05,819 INFO L854 garLoopResultBuilder]: At program point L928(line 928) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8))) [2021-12-06 18:39:05,819 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 18:39:05,819 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 18:39:05,819 INFO L861 garLoopResultBuilder]: At program point L957(lines 896 961) the Hoare annotation is: true [2021-12-06 18:39:05,819 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 18:39:05,819 INFO L858 garLoopResultBuilder]: For program point L916(lines 916 922) no Hoare annotation was computed. [2021-12-06 18:39:05,819 INFO L858 garLoopResultBuilder]: For program point L916-1(lines 916 922) no Hoare annotation was computed. [2021-12-06 18:39:05,819 INFO L858 garLoopResultBuilder]: For program point L908(lines 908 912) no Hoare annotation was computed. [2021-12-06 18:39:05,819 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 18:39:05,819 INFO L854 garLoopResultBuilder]: At program point L892(lines 887 894) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8))) [2021-12-06 18:39:05,819 INFO L854 garLoopResultBuilder]: At program point L954(lines 905 955) the Hoare annotation is: false [2021-12-06 18:39:05,819 INFO L861 garLoopResultBuilder]: At program point L566(lines 559 568) the Hoare annotation is: true [2021-12-06 18:39:05,820 INFO L858 garLoopResultBuilder]: For program point L579(lines 579 586) no Hoare annotation was computed. [2021-12-06 18:39:05,820 INFO L858 garLoopResultBuilder]: For program point L579-2(lines 579 586) no Hoare annotation was computed. [2021-12-06 18:39:05,820 INFO L858 garLoopResultBuilder]: For program point L926(lines 926 932) no Hoare annotation was computed. [2021-12-06 18:39:05,820 INFO L858 garLoopResultBuilder]: For program point L926-1(lines 926 932) no Hoare annotation was computed. [2021-12-06 18:39:05,820 INFO L854 garLoopResultBuilder]: At program point L121(lines 116 124) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 18:39:05,820 INFO L854 garLoopResultBuilder]: At program point L951(lines 906 953) the Hoare annotation is: (let ((.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (= ~pumpRunning~0 1)) (.cse7 (= ~pumpRunning~0 0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse0 .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse9 .cse2 .cse3 .cse4 .cse8 .cse5 .cse6) (and .cse7 .cse9 .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-06 18:39:05,820 INFO L854 garLoopResultBuilder]: At program point L918(line 918) the Hoare annotation is: (let ((.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (= ~pumpRunning~0 1)) (.cse7 (= ~pumpRunning~0 0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse0 .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse9 .cse2 .cse3 .cse4 .cse8 .cse5 .cse6) (and .cse7 .cse9 .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-06 18:39:05,820 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 18:39:05,820 INFO L861 garLoopResultBuilder]: At program point L588(lines 569 591) the Hoare annotation is: true [2021-12-06 18:39:05,820 INFO L854 garLoopResultBuilder]: At program point L555(lines 551 557) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 18:39:05,821 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 610 621) no Hoare annotation was computed. [2021-12-06 18:39:05,821 INFO L858 garLoopResultBuilder]: For program point L614-1(lines 610 621) no Hoare annotation was computed. [2021-12-06 18:39:05,821 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 610 621) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (= ~pumpRunning~0 1))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse4 .cse6) (or .cse0 .cse2 .cse5 .cse7 .cse4) (or .cse2 .cse3 .cse7 .cse4 .cse6))) [2021-12-06 18:39:05,821 INFO L854 garLoopResultBuilder]: At program point L684(lines 675 688) the Hoare annotation is: (let ((.cse11 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse10 (= ~pumpRunning~0 0)) (.cse13 (= 1 ~systemActive~0)) (.cse12 (<= ~waterLevel~0 1)) (.cse14 (<= 1 ~methaneLevelCritical~0))) (let ((.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (not .cse14)) (.cse4 (not .cse12)) (.cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse10 .cse14 .cse12 .cse13)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse13)) (.cse2 (and .cse11 .cse10 .cse12)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and .cse10 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0))) (.cse7 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse7 .cse8) (or .cse1 .cse5 .cse9 .cse4) (or .cse1 .cse3 .cse9 .cse4) (or .cse0 .cse1 .cse5 .cse4 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse6 .cse7)))) [2021-12-06 18:39:05,821 INFO L854 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse9 (= 1 ~systemActive~0)) (.cse8 (<= ~waterLevel~0 1))) (let ((.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not .cse8)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse9)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse7 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) (= ~pumpRunning~0 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1|) (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0) .cse8 .cse9 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6 .cse7) (or .cse0 .cse5 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse6 .cse7)))) [2021-12-06 18:39:05,821 INFO L858 garLoopResultBuilder]: For program point L736(lines 736 744) no Hoare annotation was computed. [2021-12-06 18:39:05,821 INFO L858 garLoopResultBuilder]: For program point L732(lines 732 749) no Hoare annotation was computed. [2021-12-06 18:39:05,821 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 800) no Hoare annotation was computed. [2021-12-06 18:39:05,821 INFO L854 garLoopResultBuilder]: At program point L792(line 792) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse6 (and (= ~pumpRunning~0 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~5#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse5 .cse6) (or .cse4 .cse0 .cse7 .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse4 .cse0 .cse7 .cse5 .cse6) (or .cse0 .cse7 .cse2 .cse3))) [2021-12-06 18:39:05,822 INFO L854 garLoopResultBuilder]: At program point L794-2(lines 787 803) the Hoare annotation is: (let ((.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse5 (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~5#1|)) (.cse6 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)) (.cse7 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|)) (.cse8 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) (.cse9 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0)) (.cse10 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9 (= ~pumpRunning~0 1) .cse10) .cse0 .cse11 .cse12) (or .cse4 .cse0 .cse11 .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse0 .cse11 .cse2 .cse3) (or (and (= ~pumpRunning~0 0) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse4 .cse0 .cse1 .cse12))) [2021-12-06 18:39:05,822 INFO L858 garLoopResultBuilder]: For program point L792-1(line 792) no Hoare annotation was computed. [2021-12-06 18:39:05,822 INFO L854 garLoopResultBuilder]: At program point L883(lines 868 886) the Hoare annotation is: (let ((.cse13 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse17 (= ~pumpRunning~0 0)) (.cse18 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1|)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse12 (= 1 ~systemActive~0)) (.cse19 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (let ((.cse6 (and .cse14 .cse15 .cse16 .cse17 .cse18 .cse11 .cse10 .cse12 .cse19)) (.cse3 (and .cse17 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse0 (and .cse14 .cse15 .cse16 .cse17 .cse18 .cse13 .cse10 .cse12 .cse19)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not .cse13)) (.cse2 (not .cse12)) (.cse7 (not .cse11)) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not .cse10))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse2 .cse7 .cse8) (or .cse2 .cse4 .cse9 .cse8) (or .cse1 .cse6 .cse2 .cse3 .cse7 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse8) (or .cse2 .cse7 .cse9 .cse8)))) [2021-12-06 18:39:05,822 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 728 752) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse8 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse2 .cse3 .cse6 .cse7 .cse8))) [2021-12-06 18:39:05,822 INFO L854 garLoopResultBuilder]: At program point L784(lines 779 786) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse5) (or .cse0 (and (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~5#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0) (= ~pumpRunning~0 1) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) .cse1 .cse6 .cse3) (or .cse0 .cse1 .cse6 .cse5) (or .cse1 .cse6 .cse4 .cse5))) [2021-12-06 18:39:05,822 INFO L858 garLoopResultBuilder]: For program point L877(lines 877 881) no Hoare annotation was computed. [2021-12-06 18:39:05,822 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 728 752) no Hoare annotation was computed. [2021-12-06 18:39:05,822 INFO L858 garLoopResultBuilder]: For program point L877-2(lines 877 881) no Hoare annotation was computed. [2021-12-06 18:39:05,823 INFO L854 garLoopResultBuilder]: At program point L747(line 747) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse7 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse1 .cse2 .cse5 .cse6 .cse7) (or .cse1 .cse4 .cse5 .cse6 .cse7))) [2021-12-06 18:39:05,823 INFO L858 garLoopResultBuilder]: For program point L747-1(lines 728 752) no Hoare annotation was computed. [2021-12-06 18:39:05,823 INFO L858 garLoopResultBuilder]: For program point L679(lines 679 685) no Hoare annotation was computed. [2021-12-06 18:39:05,823 INFO L861 garLoopResultBuilder]: At program point L817(line 817) the Hoare annotation is: true [2021-12-06 18:39:05,823 INFO L858 garLoopResultBuilder]: For program point L817-1(line 817) no Hoare annotation was computed. [2021-12-06 18:39:05,823 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 812 822) the Hoare annotation is: true [2021-12-06 18:39:05,823 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 812 822) no Hoare annotation was computed. [2021-12-06 18:39:05,823 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 812 822) no Hoare annotation was computed. [2021-12-06 18:39:05,825 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 18:39:05,826 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 18:39:05,855 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 06:39:05 BoogieIcfgContainer [2021-12-06 18:39:05,856 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 18:39:05,856 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 18:39:05,856 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 18:39:05,856 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 18:39:05,857 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 06:38:56" (3/4) ... [2021-12-06 18:39:05,859 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 18:39:05,863 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 18:39:05,863 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 18:39:05,863 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 18:39:05,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 18:39:05,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-06 18:39:05,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 18:39:05,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-06 18:39:05,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-06 18:39:05,870 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-12-06 18:39:05,871 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 18:39:05,871 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 18:39:05,872 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 18:39:05,872 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 18:39:05,872 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 18:39:05,873 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 18:39:05,889 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-12-06 18:39:05,889 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 [2021-12-06 18:39:05,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= methaneLevelCritical && waterLevel <= 1) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) && pumpRunning == 1) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || ((((((methaneLevelCritical == 0 && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) [2021-12-06 18:39:05,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2021-12-06 18:39:05,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) [2021-12-06 18:39:05,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || ((((((1 <= methaneLevelCritical && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1)) || ((((((methaneLevelCritical == 0 && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1) [2021-12-06 18:39:05,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || waterLevel <= \old(waterLevel))) && (((((((waterLevel <= 1 && !(tmp == 0)) && pumpRunning == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel <= \old(waterLevel))) && ((((((((((methaneLevelCritical == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \result <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2)) || (((methaneLevelCritical == 0 && tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) [2021-12-06 18:39:05,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2021-12-06 18:39:05,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((tmp == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \result == 1)) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2021-12-06 18:39:05,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || ((((((1 <= tmp && \result == 0) && 1 <= tmp___0) && tmp == methaneLevelCritical) && tmp == 0) && pumpRunning == 1) && 1 <= \result)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && ((((((((((pumpRunning == 0 && 1 <= tmp) && \result == 0) && 1 <= tmp___0) && tmp == methaneLevelCritical) && tmp == 0) && 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) [2021-12-06 18:39:05,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || ((((((1 <= tmp && \result == 0) && 1 <= tmp___0) && tmp == methaneLevelCritical) && tmp == 0) && pumpRunning == 1) && 1 <= \result)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) [2021-12-06 18:39:05,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) [2021-12-06 18:39:05,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((\result == 1 && tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) [2021-12-06 18:39:05,893 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && \result == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && ((((!(\old(pumpRunning) == 0) || ((((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0)) || !(1 == systemActive)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && ((((((((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && \result == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) [2021-12-06 18:39:05,893 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2021-12-06 18:39:05,911 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 18:39:05,911 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 18:39:05,911 INFO L158 Benchmark]: Toolchain (without parser) took 10502.39ms. Allocated memory was 119.5MB in the beginning and 249.6MB in the end (delta: 130.0MB). Free memory was 76.1MB in the beginning and 112.0MB in the end (delta: -35.9MB). Peak memory consumption was 95.9MB. Max. memory is 16.1GB. [2021-12-06 18:39:05,912 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 119.5MB. Free memory was 93.8MB in the beginning and 93.6MB in the end (delta: 141.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 18:39:05,912 INFO L158 Benchmark]: CACSL2BoogieTranslator took 332.08ms. Allocated memory is still 119.5MB. Free memory was 75.9MB in the beginning and 57.2MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-06 18:39:05,912 INFO L158 Benchmark]: Boogie Procedure Inliner took 44.22ms. Allocated memory is still 119.5MB. Free memory was 57.2MB in the beginning and 54.7MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 18:39:05,912 INFO L158 Benchmark]: Boogie Preprocessor took 36.72ms. Allocated memory is still 119.5MB. Free memory was 54.7MB in the beginning and 96.8MB in the end (delta: -42.1MB). Peak memory consumption was 5.5MB. Max. memory is 16.1GB. [2021-12-06 18:39:05,913 INFO L158 Benchmark]: RCFGBuilder took 336.59ms. Allocated memory is still 119.5MB. Free memory was 96.8MB in the beginning and 80.2MB in the end (delta: 16.5MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-12-06 18:39:05,913 INFO L158 Benchmark]: TraceAbstraction took 9693.11ms. Allocated memory was 119.5MB in the beginning and 249.6MB in the end (delta: 130.0MB). Free memory was 79.7MB in the beginning and 118.3MB in the end (delta: -38.6MB). Peak memory consumption was 136.1MB. Max. memory is 16.1GB. [2021-12-06 18:39:05,913 INFO L158 Benchmark]: Witness Printer took 54.86ms. Allocated memory is still 249.6MB. Free memory was 118.3MB in the beginning and 112.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-06 18:39:05,915 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 119.5MB. Free memory was 93.8MB in the beginning and 93.6MB in the end (delta: 141.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 332.08ms. Allocated memory is still 119.5MB. Free memory was 75.9MB in the beginning and 57.2MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 44.22ms. Allocated memory is still 119.5MB. Free memory was 57.2MB in the beginning and 54.7MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.72ms. Allocated memory is still 119.5MB. Free memory was 54.7MB in the beginning and 96.8MB in the end (delta: -42.1MB). Peak memory consumption was 5.5MB. Max. memory is 16.1GB. * RCFGBuilder took 336.59ms. Allocated memory is still 119.5MB. Free memory was 96.8MB in the beginning and 80.2MB in the end (delta: 16.5MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 9693.11ms. Allocated memory was 119.5MB in the beginning and 249.6MB in the end (delta: 130.0MB). Free memory was 79.7MB in the beginning and 118.3MB in the end (delta: -38.6MB). Peak memory consumption was 136.1MB. Max. memory is 16.1GB. * Witness Printer took 54.86ms. Allocated memory is still 249.6MB. Free memory was 118.3MB in the beginning and 112.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 967]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 96 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.6s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2884 SdHoareTripleChecker+Valid, 1.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2843 mSDsluCounter, 5338 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3776 mSDsCounter, 1157 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3956 IncrementalHoareTripleChecker+Invalid, 5113 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1157 mSolverCounterUnsat, 1562 mSDtfsCounter, 3956 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 718 GetRequests, 500 SyntacticMatches, 1 SemanticMatches, 217 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1610 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=802occurred in iteration=9, InterpolantAutomatonStates: 179, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 173 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 2708 PreInvPairs, 2965 NumberOfFragments, 3315 HoareAnnotationTreeSize, 2708 FomulaSimplifications, 338 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 44 FomulaSimplificationsInter, 11093 FormulaSimplificationTreeSizeReductionInter, 2.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 1063 NumberOfCodeBlocks, 1063 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1144 ConstructedInterpolants, 0 QuantifiedInterpolants, 2119 SizeOfPredicates, 9 NumberOfNonLiveVariables, 1350 ConjunctsInSsa, 34 ConjunctsInUnsatCore, 18 InterpolantComputations, 13 PerfectInterpolantSequences, 218/258 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || waterLevel <= \old(waterLevel))) && (((((((waterLevel <= 1 && !(tmp == 0)) && pumpRunning == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || waterLevel <= \old(waterLevel))) && ((((((((((methaneLevelCritical == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \result <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2)) || (((methaneLevelCritical == 0 && tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: ((((((((1 <= methaneLevelCritical && waterLevel <= 1) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) && pumpRunning == 1) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || ((((((methaneLevelCritical == 0 && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 823]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((\result == 1 && tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 868]: Loop Invariant Derived loop invariant: (((((((((((((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && \result == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && ((((!(\old(pumpRunning) == 0) || ((((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0)) || !(1 == systemActive)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && ((((((((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && \result == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 804]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 551]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 779]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || ((((((1 <= tmp && \result == 0) && 1 <= tmp___0) && tmp == methaneLevelCritical) && tmp == 0) && pumpRunning == 1) && 1 <= \result)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 787]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || ((((((1 <= tmp && \result == 0) && 1 <= tmp___0) && tmp == methaneLevelCritical) && tmp == 0) && pumpRunning == 1) && 1 <= \result)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && ((((((((((pumpRunning == 0 && 1 <= tmp) && \result == 0) && 1 <= tmp___0) && tmp == methaneLevelCritical) && tmp == 0) && 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: (((((((((((tmp == 0 && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \result == 1)) && (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 494]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 754]: Loop Invariant Derived loop invariant: ((((((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 887]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || ((((((1 <= methaneLevelCritical && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1)) || ((((((methaneLevelCritical == 0 && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-12-06 18:39:05,951 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88ed0ff6-c317-4d41-95ca-637f787b1ea1/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE