./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 22:52:28,378 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 22:52:28,379 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 22:52:28,401 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 22:52:28,402 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 22:52:28,403 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 22:52:28,404 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 22:52:28,406 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 22:52:28,407 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 22:52:28,408 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 22:52:28,409 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 22:52:28,410 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 22:52:28,411 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 22:52:28,412 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 22:52:28,413 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 22:52:28,414 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 22:52:28,415 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 22:52:28,416 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 22:52:28,417 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 22:52:28,419 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 22:52:28,420 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 22:52:28,421 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 22:52:28,422 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 22:52:28,423 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 22:52:28,426 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 22:52:28,426 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 22:52:28,426 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 22:52:28,427 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 22:52:28,427 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 22:52:28,428 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 22:52:28,429 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 22:52:28,429 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 22:52:28,430 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 22:52:28,430 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 22:52:28,431 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 22:52:28,431 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 22:52:28,432 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 22:52:28,432 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 22:52:28,432 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 22:52:28,433 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 22:52:28,433 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 22:52:28,434 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 22:52:28,457 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 22:52:28,457 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 22:52:28,457 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 22:52:28,458 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 22:52:28,458 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 22:52:28,458 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 22:52:28,459 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 22:52:28,459 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 22:52:28,459 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 22:52:28,460 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 22:52:28,460 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 22:52:28,460 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 22:52:28,460 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 22:52:28,460 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 22:52:28,461 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 22:52:28,461 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 22:52:28,461 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 22:52:28,461 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 22:52:28,461 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 22:52:28,461 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 22:52:28,461 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 22:52:28,465 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 22:52:28,466 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 22:52:28,466 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 22:52:28,466 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:52:28,466 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 22:52:28,467 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 22:52:28,467 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 22:52:28,467 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 22:52:28,467 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 22:52:28,467 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 22:52:28,468 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 22:52:28,468 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 22:52:28,468 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 22:52:28,468 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f [2021-12-06 22:52:28,673 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 22:52:28,692 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 22:52:28,693 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 22:52:28,694 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 22:52:28,695 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 22:52:28,696 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2021-12-06 22:52:28,742 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/data/2840df719/5b08a5310c944690902c02134874a0c4/FLAG4d7b760a0 [2021-12-06 22:52:29,138 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 22:52:29,138 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2021-12-06 22:52:29,147 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/data/2840df719/5b08a5310c944690902c02134874a0c4/FLAG4d7b760a0 [2021-12-06 22:52:29,157 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/data/2840df719/5b08a5310c944690902c02134874a0c4 [2021-12-06 22:52:29,159 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 22:52:29,160 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 22:52:29,162 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 22:52:29,162 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 22:52:29,165 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 22:52:29,166 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,167 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@242cf113 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29, skipping insertion in model container [2021-12-06 22:52:29,167 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,172 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 22:52:29,207 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:52:29,309 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2021-12-06 22:52:29,399 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:52:29,406 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 22:52:29,415 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2021-12-06 22:52:29,457 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:52:29,470 INFO L208 MainTranslator]: Completed translation [2021-12-06 22:52:29,470 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29 WrapperNode [2021-12-06 22:52:29,470 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 22:52:29,471 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 22:52:29,471 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 22:52:29,471 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 22:52:29,476 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,487 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,510 INFO L137 Inliner]: procedures = 58, calls = 162, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 283 [2021-12-06 22:52:29,510 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 22:52:29,511 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 22:52:29,511 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 22:52:29,511 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 22:52:29,517 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,518 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,520 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,520 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,525 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,529 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,531 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,533 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 22:52:29,534 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 22:52:29,534 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 22:52:29,534 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 22:52:29,535 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (1/1) ... [2021-12-06 22:52:29,540 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:52:29,560 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:52:29,575 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 22:52:29,578 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 22:52:29,606 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 22:52:29,606 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 22:52:29,606 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 22:52:29,606 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 22:52:29,607 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 22:52:29,607 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 22:52:29,607 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 22:52:29,607 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-06 22:52:29,607 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-06 22:52:29,607 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 22:52:29,607 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 22:52:29,607 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 22:52:29,607 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 22:52:29,607 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 22:52:29,608 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 22:52:29,608 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-06 22:52:29,608 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-06 22:52:29,608 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-06 22:52:29,608 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-06 22:52:29,608 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 22:52:29,608 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 22:52:29,608 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 22:52:29,608 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 22:52:29,608 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 22:52:29,670 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 22:52:29,671 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 22:52:29,917 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 22:52:29,923 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 22:52:29,924 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 22:52:29,925 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:52:29 BoogieIcfgContainer [2021-12-06 22:52:29,925 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 22:52:29,927 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 22:52:29,927 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 22:52:29,930 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 22:52:29,930 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 10:52:29" (1/3) ... [2021-12-06 22:52:29,931 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7455624f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:52:29, skipping insertion in model container [2021-12-06 22:52:29,931 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:29" (2/3) ... [2021-12-06 22:52:29,931 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7455624f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:52:29, skipping insertion in model container [2021-12-06 22:52:29,931 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:52:29" (3/3) ... [2021-12-06 22:52:29,932 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product62.cil.c [2021-12-06 22:52:29,937 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 22:52:29,937 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 22:52:29,976 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 22:52:29,982 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 22:52:29,982 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 22:52:29,998 INFO L276 IsEmpty]: Start isEmpty. Operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-06 22:52:30,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-06 22:52:30,006 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:30,006 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:30,007 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:30,011 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:30,011 INFO L85 PathProgramCache]: Analyzing trace with hash 1444919738, now seen corresponding path program 1 times [2021-12-06 22:52:30,019 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:30,019 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [113519729] [2021-12-06 22:52:30,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:30,020 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:30,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 22:52:30,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:52:30,173 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:30,173 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [113519729] [2021-12-06 22:52:30,173 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [113519729] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:30,174 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:30,174 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:52:30,175 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1132536548] [2021-12-06 22:52:30,175 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:30,178 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 22:52:30,178 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:30,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 22:52:30,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:52:30,199 INFO L87 Difference]: Start difference. First operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 22:52:30,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:30,226 INFO L93 Difference]: Finished difference Result 214 states and 289 transitions. [2021-12-06 22:52:30,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 22:52:30,228 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-06 22:52:30,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:30,235 INFO L225 Difference]: With dead ends: 214 [2021-12-06 22:52:30,235 INFO L226 Difference]: Without dead ends: 102 [2021-12-06 22:52:30,238 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:52:30,241 INFO L933 BasicCegarLoop]: 141 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:30,241 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:52:30,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2021-12-06 22:52:30,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2021-12-06 22:52:30,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 83 states have internal predecessors, (97), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-06 22:52:30,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 132 transitions. [2021-12-06 22:52:30,276 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 132 transitions. Word has length 25 [2021-12-06 22:52:30,276 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:30,276 INFO L470 AbstractCegarLoop]: Abstraction has 102 states and 132 transitions. [2021-12-06 22:52:30,276 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 22:52:30,277 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 132 transitions. [2021-12-06 22:52:30,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-06 22:52:30,279 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:30,279 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:30,279 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 22:52:30,279 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:30,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:30,280 INFO L85 PathProgramCache]: Analyzing trace with hash 1097025375, now seen corresponding path program 1 times [2021-12-06 22:52:30,280 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:30,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1240506626] [2021-12-06 22:52:30,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:30,281 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:30,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-06 22:52:30,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,337 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:52:30,337 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:30,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1240506626] [2021-12-06 22:52:30,338 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1240506626] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:30,338 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:30,338 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:52:30,338 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1658188530] [2021-12-06 22:52:30,338 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:30,339 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:52:30,339 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:30,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:52:30,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:52:30,340 INFO L87 Difference]: Start difference. First operand 102 states and 132 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 22:52:30,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:30,355 INFO L93 Difference]: Finished difference Result 169 states and 219 transitions. [2021-12-06 22:52:30,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:52:30,356 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-06 22:52:30,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:30,357 INFO L225 Difference]: With dead ends: 169 [2021-12-06 22:52:30,357 INFO L226 Difference]: Without dead ends: 93 [2021-12-06 22:52:30,358 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:52:30,359 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 13 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:30,360 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:52:30,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2021-12-06 22:52:30,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2021-12-06 22:52:30,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-06 22:52:30,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 120 transitions. [2021-12-06 22:52:30,370 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 120 transitions. Word has length 26 [2021-12-06 22:52:30,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:30,370 INFO L470 AbstractCegarLoop]: Abstraction has 93 states and 120 transitions. [2021-12-06 22:52:30,370 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 22:52:30,370 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 120 transitions. [2021-12-06 22:52:30,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-06 22:52:30,371 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:30,372 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:30,372 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 22:52:30,372 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:30,372 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:30,372 INFO L85 PathProgramCache]: Analyzing trace with hash 2131311946, now seen corresponding path program 1 times [2021-12-06 22:52:30,373 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:30,373 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497526430] [2021-12-06 22:52:30,373 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:30,373 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:30,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 22:52:30,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:52:30,451 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:30,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497526430] [2021-12-06 22:52:30,451 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [497526430] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:30,452 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:30,452 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:52:30,452 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [356467092] [2021-12-06 22:52:30,452 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:30,452 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:52:30,452 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:30,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:52:30,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:52:30,453 INFO L87 Difference]: Start difference. First operand 93 states and 120 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 22:52:30,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:30,497 INFO L93 Difference]: Finished difference Result 179 states and 234 transitions. [2021-12-06 22:52:30,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:52:30,498 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-06 22:52:30,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:30,499 INFO L225 Difference]: With dead ends: 179 [2021-12-06 22:52:30,499 INFO L226 Difference]: Without dead ends: 93 [2021-12-06 22:52:30,500 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:52:30,501 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 145 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:30,502 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [145 Valid, 307 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:52:30,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2021-12-06 22:52:30,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2021-12-06 22:52:30,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 77 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-06 22:52:30,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 119 transitions. [2021-12-06 22:52:30,512 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 119 transitions. Word has length 31 [2021-12-06 22:52:30,512 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:30,512 INFO L470 AbstractCegarLoop]: Abstraction has 93 states and 119 transitions. [2021-12-06 22:52:30,512 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 22:52:30,512 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 119 transitions. [2021-12-06 22:52:30,514 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-06 22:52:30,514 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:30,514 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:30,514 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 22:52:30,515 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:30,515 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:30,515 INFO L85 PathProgramCache]: Analyzing trace with hash 394218810, now seen corresponding path program 1 times [2021-12-06 22:52:30,515 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:30,515 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [984550154] [2021-12-06 22:52:30,515 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:30,516 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:30,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 22:52:30,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:30,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:30,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-06 22:52:30,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,582 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:52:30,582 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:30,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [984550154] [2021-12-06 22:52:30,583 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [984550154] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:30,583 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:30,583 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:52:30,583 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [99646407] [2021-12-06 22:52:30,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:30,584 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:52:30,584 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:30,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:52:30,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:52:30,584 INFO L87 Difference]: Start difference. First operand 93 states and 119 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 22:52:30,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:30,725 INFO L93 Difference]: Finished difference Result 271 states and 345 transitions. [2021-12-06 22:52:30,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:52:30,726 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 46 [2021-12-06 22:52:30,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:30,728 INFO L225 Difference]: With dead ends: 271 [2021-12-06 22:52:30,729 INFO L226 Difference]: Without dead ends: 185 [2021-12-06 22:52:30,730 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:52:30,731 INFO L933 BasicCegarLoop]: 155 mSDtfsCounter, 216 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:30,732 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [218 Valid, 349 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:52:30,733 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2021-12-06 22:52:30,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 179. [2021-12-06 22:52:30,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 133 states have (on average 1.2481203007518797) internal successors, (166), 142 states have internal predecessors, (166), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2021-12-06 22:52:30,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 217 transitions. [2021-12-06 22:52:30,754 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 217 transitions. Word has length 46 [2021-12-06 22:52:30,755 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:30,755 INFO L470 AbstractCegarLoop]: Abstraction has 179 states and 217 transitions. [2021-12-06 22:52:30,755 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 22:52:30,755 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 217 transitions. [2021-12-06 22:52:30,756 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-06 22:52:30,757 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:30,757 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:30,757 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 22:52:30,757 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:30,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:30,758 INFO L85 PathProgramCache]: Analyzing trace with hash 1565999890, now seen corresponding path program 1 times [2021-12-06 22:52:30,758 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:30,758 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1690371183] [2021-12-06 22:52:30,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:30,758 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:30,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 22:52:30,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:30,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:52:30,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:52:30,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:30,841 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:52:30,841 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:30,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1690371183] [2021-12-06 22:52:30,841 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1690371183] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:30,841 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:30,842 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:52:30,842 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1743722929] [2021-12-06 22:52:30,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:30,842 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:52:30,843 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:30,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:52:30,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:52:30,843 INFO L87 Difference]: Start difference. First operand 179 states and 217 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 22:52:31,017 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:31,017 INFO L93 Difference]: Finished difference Result 458 states and 576 transitions. [2021-12-06 22:52:31,018 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 22:52:31,018 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2021-12-06 22:52:31,018 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:31,020 INFO L225 Difference]: With dead ends: 458 [2021-12-06 22:52:31,021 INFO L226 Difference]: Without dead ends: 286 [2021-12-06 22:52:31,022 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-06 22:52:31,022 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 158 mSDsluCounter, 334 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 450 SdHoareTripleChecker+Invalid, 232 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:31,023 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [165 Valid, 450 Invalid, 232 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:52:31,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2021-12-06 22:52:31,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 278. [2021-12-06 22:52:31,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 207 states have (on average 1.2367149758454106) internal successors, (256), 219 states have internal predecessors, (256), 35 states have call successors, (35), 30 states have call predecessors, (35), 35 states have return successors, (48), 37 states have call predecessors, (48), 35 states have call successors, (48) [2021-12-06 22:52:31,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 339 transitions. [2021-12-06 22:52:31,047 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 339 transitions. Word has length 52 [2021-12-06 22:52:31,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:31,048 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 339 transitions. [2021-12-06 22:52:31,048 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 22:52:31,048 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 339 transitions. [2021-12-06 22:52:31,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-06 22:52:31,050 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:31,050 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:31,050 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 22:52:31,051 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:31,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:31,051 INFO L85 PathProgramCache]: Analyzing trace with hash 862642872, now seen corresponding path program 1 times [2021-12-06 22:52:31,051 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:31,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1982245538] [2021-12-06 22:52:31,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:31,052 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:31,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:52:31,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 22:52:31,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:31,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:52:31,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-06 22:52:31,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,141 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:52:31,141 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:31,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1982245538] [2021-12-06 22:52:31,142 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1982245538] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:31,142 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:31,142 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 22:52:31,142 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [628063269] [2021-12-06 22:52:31,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:31,142 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 22:52:31,143 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:31,143 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 22:52:31,143 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:52:31,143 INFO L87 Difference]: Start difference. First operand 278 states and 339 transitions. Second operand has 8 states, 8 states have (on average 5.625) internal successors, (45), 6 states have internal predecessors, (45), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-06 22:52:31,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:31,505 INFO L93 Difference]: Finished difference Result 682 states and 870 transitions. [2021-12-06 22:52:31,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-06 22:52:31,505 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 6 states have internal predecessors, (45), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 56 [2021-12-06 22:52:31,505 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:31,508 INFO L225 Difference]: With dead ends: 682 [2021-12-06 22:52:31,508 INFO L226 Difference]: Without dead ends: 510 [2021-12-06 22:52:31,510 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 96 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=141, Invalid=365, Unknown=0, NotChecked=0, Total=506 [2021-12-06 22:52:31,511 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 461 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 399 mSolverCounterSat, 203 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 466 SdHoareTripleChecker+Valid, 410 SdHoareTripleChecker+Invalid, 602 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 203 IncrementalHoareTripleChecker+Valid, 399 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:31,511 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [466 Valid, 410 Invalid, 602 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [203 Valid, 399 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 22:52:31,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 510 states. [2021-12-06 22:52:31,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 510 to 464. [2021-12-06 22:52:31,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.215743440233236) internal successors, (417), 365 states have internal predecessors, (417), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2021-12-06 22:52:31,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 572 transitions. [2021-12-06 22:52:31,558 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 572 transitions. Word has length 56 [2021-12-06 22:52:31,558 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:31,559 INFO L470 AbstractCegarLoop]: Abstraction has 464 states and 572 transitions. [2021-12-06 22:52:31,559 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 6 states have internal predecessors, (45), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-06 22:52:31,559 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 572 transitions. [2021-12-06 22:52:31,561 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-06 22:52:31,561 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:31,561 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:31,561 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 22:52:31,561 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:31,561 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:31,562 INFO L85 PathProgramCache]: Analyzing trace with hash 924682486, now seen corresponding path program 1 times [2021-12-06 22:52:31,562 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:31,562 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [221900995] [2021-12-06 22:52:31,562 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:31,562 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:31,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:52:31,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 22:52:31,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:31,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:52:31,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-06 22:52:31,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,622 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:52:31,622 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:31,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [221900995] [2021-12-06 22:52:31,622 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [221900995] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:31,622 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:31,623 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:52:31,623 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82454707] [2021-12-06 22:52:31,623 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:31,623 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:52:31,623 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:31,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:52:31,624 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:52:31,624 INFO L87 Difference]: Start difference. First operand 464 states and 572 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:52:31,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:31,799 INFO L93 Difference]: Finished difference Result 860 states and 1070 transitions. [2021-12-06 22:52:31,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 22:52:31,800 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2021-12-06 22:52:31,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:31,804 INFO L225 Difference]: With dead ends: 860 [2021-12-06 22:52:31,804 INFO L226 Difference]: Without dead ends: 498 [2021-12-06 22:52:31,806 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2021-12-06 22:52:31,806 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 186 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 235 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 311 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 235 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:31,807 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [189 Valid, 380 Invalid, 311 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 235 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:52:31,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2021-12-06 22:52:31,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 464. [2021-12-06 22:52:31,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.2128279883381925) internal successors, (416), 365 states have internal predecessors, (416), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2021-12-06 22:52:31,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 571 transitions. [2021-12-06 22:52:31,844 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 571 transitions. Word has length 56 [2021-12-06 22:52:31,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:31,844 INFO L470 AbstractCegarLoop]: Abstraction has 464 states and 571 transitions. [2021-12-06 22:52:31,844 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:52:31,844 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 571 transitions. [2021-12-06 22:52:31,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-06 22:52:31,846 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:31,846 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:31,846 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 22:52:31,846 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:31,847 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:31,847 INFO L85 PathProgramCache]: Analyzing trace with hash 790668980, now seen corresponding path program 1 times [2021-12-06 22:52:31,847 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:31,847 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1473441889] [2021-12-06 22:52:31,847 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:31,847 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:31,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:52:31,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 22:52:31,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:31,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:52:31,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-06 22:52:31,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:31,930 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:52:31,930 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:31,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1473441889] [2021-12-06 22:52:31,931 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1473441889] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:31,931 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:31,931 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 22:52:31,931 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [585873598] [2021-12-06 22:52:31,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:31,931 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 22:52:31,932 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:31,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 22:52:31,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:52:31,932 INFO L87 Difference]: Start difference. First operand 464 states and 571 transitions. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:52:32,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:32,214 INFO L93 Difference]: Finished difference Result 954 states and 1190 transitions. [2021-12-06 22:52:32,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 22:52:32,214 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2021-12-06 22:52:32,214 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:32,217 INFO L225 Difference]: With dead ends: 954 [2021-12-06 22:52:32,217 INFO L226 Difference]: Without dead ends: 497 [2021-12-06 22:52:32,218 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=204, Unknown=0, NotChecked=0, Total=272 [2021-12-06 22:52:32,219 INFO L933 BasicCegarLoop]: 120 mSDtfsCounter, 210 mSDsluCounter, 423 mSDsCounter, 0 mSdLazyCounter, 481 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 213 SdHoareTripleChecker+Valid, 543 SdHoareTripleChecker+Invalid, 554 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 481 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:32,219 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [213 Valid, 543 Invalid, 554 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 481 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 22:52:32,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 497 states. [2021-12-06 22:52:32,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 497 to 467. [2021-12-06 22:52:32,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 467 states, 348 states have (on average 1.206896551724138) internal successors, (420), 369 states have internal predecessors, (420), 59 states have call successors, (59), 45 states have call predecessors, (59), 59 states have return successors, (94), 63 states have call predecessors, (94), 59 states have call successors, (94) [2021-12-06 22:52:32,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 467 states to 467 states and 573 transitions. [2021-12-06 22:52:32,248 INFO L78 Accepts]: Start accepts. Automaton has 467 states and 573 transitions. Word has length 56 [2021-12-06 22:52:32,248 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:32,248 INFO L470 AbstractCegarLoop]: Abstraction has 467 states and 573 transitions. [2021-12-06 22:52:32,248 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:52:32,248 INFO L276 IsEmpty]: Start isEmpty. Operand 467 states and 573 transitions. [2021-12-06 22:52:32,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 22:52:32,249 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:32,249 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:32,250 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 22:52:32,250 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:32,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:32,250 INFO L85 PathProgramCache]: Analyzing trace with hash -1116274415, now seen corresponding path program 1 times [2021-12-06 22:52:32,250 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:32,250 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [230601897] [2021-12-06 22:52:32,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:32,250 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:32,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:32,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:52:32,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:32,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 22:52:32,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:32,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:32,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:32,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:52:32,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:32,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:32,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:32,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-06 22:52:32,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:32,387 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-06 22:52:32,387 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:32,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [230601897] [2021-12-06 22:52:32,387 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [230601897] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:52:32,388 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1830002754] [2021-12-06 22:52:32,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:32,388 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:52:32,388 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:52:32,389 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:52:32,390 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 22:52:32,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:32,455 INFO L263 TraceCheckSpWp]: Trace formula consists of 393 conjuncts, 17 conjunts are in the unsatisfiable core [2021-12-06 22:52:32,459 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:52:32,775 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:52:32,775 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:52:32,775 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1830002754] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:32,775 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 22:52:32,775 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-12-06 22:52:32,776 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [653114133] [2021-12-06 22:52:32,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:32,776 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 22:52:32,776 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:32,777 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 22:52:32,777 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2021-12-06 22:52:32,777 INFO L87 Difference]: Start difference. First operand 467 states and 573 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 22:52:32,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:32,896 INFO L93 Difference]: Finished difference Result 1368 states and 1709 transitions. [2021-12-06 22:52:32,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 22:52:32,897 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2021-12-06 22:52:32,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:32,902 INFO L225 Difference]: With dead ends: 1368 [2021-12-06 22:52:32,902 INFO L226 Difference]: Without dead ends: 908 [2021-12-06 22:52:32,904 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 68 SyntacticMatches, 2 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2021-12-06 22:52:32,905 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 75 mSDsluCounter, 513 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 645 SdHoareTripleChecker+Invalid, 192 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:32,905 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 645 Invalid, 192 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:52:32,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 908 states. [2021-12-06 22:52:32,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 908 to 906. [2021-12-06 22:52:32,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1961367013372957) internal successors, (805), 711 states have internal predecessors, (805), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (189), 123 states have call predecessors, (189), 117 states have call successors, (189) [2021-12-06 22:52:32,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1111 transitions. [2021-12-06 22:52:32,976 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1111 transitions. Word has length 65 [2021-12-06 22:52:32,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:32,976 INFO L470 AbstractCegarLoop]: Abstraction has 906 states and 1111 transitions. [2021-12-06 22:52:32,976 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 22:52:32,976 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1111 transitions. [2021-12-06 22:52:32,978 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-12-06 22:52:32,978 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:32,978 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:33,012 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 22:52:33,179 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:52:33,179 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:33,180 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:33,180 INFO L85 PathProgramCache]: Analyzing trace with hash -930662327, now seen corresponding path program 1 times [2021-12-06 22:52:33,180 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:33,180 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1775287156] [2021-12-06 22:52:33,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:33,180 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:33,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:52:33,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 22:52:33,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:33,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:52:33,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:33,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-06 22:52:33,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,277 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:52:33,277 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:33,277 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1775287156] [2021-12-06 22:52:33,277 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1775287156] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:33,277 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:33,277 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-06 22:52:33,277 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [797447341] [2021-12-06 22:52:33,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:33,278 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-06 22:52:33,278 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:33,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-06 22:52:33,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-06 22:52:33,279 INFO L87 Difference]: Start difference. First operand 906 states and 1111 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 22:52:33,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:33,668 INFO L93 Difference]: Finished difference Result 1828 states and 2237 transitions. [2021-12-06 22:52:33,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 22:52:33,669 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2021-12-06 22:52:33,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:33,673 INFO L225 Difference]: With dead ends: 1828 [2021-12-06 22:52:33,673 INFO L226 Difference]: Without dead ends: 929 [2021-12-06 22:52:33,676 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=330, Unknown=0, NotChecked=0, Total=420 [2021-12-06 22:52:33,677 INFO L933 BasicCegarLoop]: 176 mSDtfsCounter, 291 mSDsluCounter, 592 mSDsCounter, 0 mSdLazyCounter, 663 mSolverCounterSat, 113 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 292 SdHoareTripleChecker+Valid, 768 SdHoareTripleChecker+Invalid, 776 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 113 IncrementalHoareTripleChecker+Valid, 663 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:33,677 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [292 Valid, 768 Invalid, 776 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [113 Valid, 663 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 22:52:33,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 929 states. [2021-12-06 22:52:33,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 929 to 906. [2021-12-06 22:52:33,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1812778603268945) internal successors, (795), 711 states have internal predecessors, (795), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (174), 123 states have call predecessors, (174), 117 states have call successors, (174) [2021-12-06 22:52:33,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1086 transitions. [2021-12-06 22:52:33,734 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1086 transitions. Word has length 66 [2021-12-06 22:52:33,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:33,735 INFO L470 AbstractCegarLoop]: Abstraction has 906 states and 1086 transitions. [2021-12-06 22:52:33,735 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 22:52:33,735 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1086 transitions. [2021-12-06 22:52:33,737 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-06 22:52:33,737 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:33,737 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:33,737 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-06 22:52:33,737 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:33,738 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:33,738 INFO L85 PathProgramCache]: Analyzing trace with hash 1947456301, now seen corresponding path program 1 times [2021-12-06 22:52:33,738 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:33,738 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [841653910] [2021-12-06 22:52:33,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:33,738 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:33,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:52:33,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-06 22:52:33,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 22:52:33,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:33,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:52:33,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:33,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-06 22:52:33,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:33,827 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-06 22:52:33,827 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:33,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [841653910] [2021-12-06 22:52:33,827 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [841653910] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:33,827 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:33,828 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-06 22:52:33,828 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1943446727] [2021-12-06 22:52:33,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:33,828 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-06 22:52:33,828 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:33,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-06 22:52:33,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2021-12-06 22:52:33,829 INFO L87 Difference]: Start difference. First operand 906 states and 1086 transitions. Second operand has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-06 22:52:34,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:34,579 INFO L93 Difference]: Finished difference Result 1806 states and 2184 transitions. [2021-12-06 22:52:34,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-06 22:52:34,580 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 69 [2021-12-06 22:52:34,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:34,585 INFO L225 Difference]: With dead ends: 1806 [2021-12-06 22:52:34,585 INFO L226 Difference]: Without dead ends: 907 [2021-12-06 22:52:34,588 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=262, Invalid=1070, Unknown=0, NotChecked=0, Total=1332 [2021-12-06 22:52:34,589 INFO L933 BasicCegarLoop]: 184 mSDtfsCounter, 343 mSDsluCounter, 407 mSDsCounter, 0 mSdLazyCounter, 1468 mSolverCounterSat, 223 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 591 SdHoareTripleChecker+Invalid, 1691 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 223 IncrementalHoareTripleChecker+Valid, 1468 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:34,589 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [344 Valid, 591 Invalid, 1691 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [223 Valid, 1468 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-06 22:52:34,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 907 states. [2021-12-06 22:52:34,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 907 to 874. [2021-12-06 22:52:34,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 874 states, 641 states have (on average 1.1528861154446177) internal successors, (739), 679 states have internal predecessors, (739), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (168), 123 states have call predecessors, (168), 117 states have call successors, (168) [2021-12-06 22:52:34,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 874 states to 874 states and 1024 transitions. [2021-12-06 22:52:34,641 INFO L78 Accepts]: Start accepts. Automaton has 874 states and 1024 transitions. Word has length 69 [2021-12-06 22:52:34,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:34,641 INFO L470 AbstractCegarLoop]: Abstraction has 874 states and 1024 transitions. [2021-12-06 22:52:34,641 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-06 22:52:34,642 INFO L276 IsEmpty]: Start isEmpty. Operand 874 states and 1024 transitions. [2021-12-06 22:52:34,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2021-12-06 22:52:34,644 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:34,645 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:34,645 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-06 22:52:34,645 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:34,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:34,645 INFO L85 PathProgramCache]: Analyzing trace with hash 20560600, now seen corresponding path program 1 times [2021-12-06 22:52:34,645 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:34,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [130988271] [2021-12-06 22:52:34,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:34,645 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:34,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:52:34,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 22:52:34,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 22:52:34,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:34,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:52:34,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:34,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:52:34,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-06 22:52:34,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:34,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 22:52:34,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2021-12-06 22:52:34,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,852 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 2 proven. 21 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2021-12-06 22:52:34,852 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:34,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [130988271] [2021-12-06 22:52:34,852 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [130988271] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:52:34,853 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [826653195] [2021-12-06 22:52:34,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:34,853 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:52:34,853 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:52:34,854 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:52:34,854 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-06 22:52:34,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:34,918 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-06 22:52:34,923 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:52:35,087 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 22:52:35,088 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:52:35,312 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-06 22:52:35,312 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [826653195] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:52:35,312 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:52:35,313 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 8, 9] total 25 [2021-12-06 22:52:35,313 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2047651952] [2021-12-06 22:52:35,313 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:52:35,313 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2021-12-06 22:52:35,313 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:35,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2021-12-06 22:52:35,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=81, Invalid=519, Unknown=0, NotChecked=0, Total=600 [2021-12-06 22:52:35,314 INFO L87 Difference]: Start difference. First operand 874 states and 1024 transitions. Second operand has 25 states, 25 states have (on average 5.04) internal successors, (126), 18 states have internal predecessors, (126), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2021-12-06 22:52:36,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:36,798 INFO L93 Difference]: Finished difference Result 1811 states and 2193 transitions. [2021-12-06 22:52:36,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 75 states. [2021-12-06 22:52:36,799 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 5.04) internal successors, (126), 18 states have internal predecessors, (126), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) Word has length 107 [2021-12-06 22:52:36,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:36,800 INFO L225 Difference]: With dead ends: 1811 [2021-12-06 22:52:36,800 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 22:52:36,808 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 337 GetRequests, 240 SyntacticMatches, 4 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2745 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=1856, Invalid=7074, Unknown=0, NotChecked=0, Total=8930 [2021-12-06 22:52:36,809 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 1855 mSDsluCounter, 641 mSDsCounter, 0 mSdLazyCounter, 1821 mSolverCounterSat, 1051 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1858 SdHoareTripleChecker+Valid, 736 SdHoareTripleChecker+Invalid, 2872 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1051 IncrementalHoareTripleChecker+Valid, 1821 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:36,809 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1858 Valid, 736 Invalid, 2872 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1051 Valid, 1821 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-06 22:52:36,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 22:52:36,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 22:52:36,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:52:36,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 22:52:36,810 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 107 [2021-12-06 22:52:36,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:36,811 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 22:52:36,811 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 5.04) internal successors, (126), 18 states have internal predecessors, (126), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2021-12-06 22:52:36,811 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 22:52:36,811 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 22:52:36,813 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 22:52:36,834 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-06 22:52:37,014 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:52:37,018 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 22:52:41,111 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 751 758) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 0 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 1)) (= 0 ~systemActive~0)) [2021-12-06 22:52:41,111 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 751 758) no Hoare annotation was computed. [2021-12-06 22:52:41,111 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 751 758) no Hoare annotation was computed. [2021-12-06 22:52:41,111 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 641 647) no Hoare annotation was computed. [2021-12-06 22:52:41,111 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 641 647) the Hoare annotation is: true [2021-12-06 22:52:41,111 INFO L854 garLoopResultBuilder]: At program point L566(lines 561 569) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-06 22:52:41,111 INFO L854 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-06 22:52:41,112 INFO L858 garLoopResultBuilder]: For program point L694-1(lines 675 699) no Hoare annotation was computed. [2021-12-06 22:52:41,112 INFO L854 garLoopResultBuilder]: At program point L849(lines 834 852) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-06 22:52:41,112 INFO L858 garLoopResultBuilder]: For program point L843(lines 843 847) no Hoare annotation was computed. [2021-12-06 22:52:41,112 INFO L858 garLoopResultBuilder]: For program point L843-2(lines 843 847) no Hoare annotation was computed. [2021-12-06 22:52:41,112 INFO L854 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-06 22:52:41,112 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 675 699) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-06 22:52:41,112 INFO L854 garLoopResultBuilder]: At program point L685(line 685) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-06 22:52:41,112 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 675 699) no Hoare annotation was computed. [2021-12-06 22:52:41,112 INFO L858 garLoopResultBuilder]: For program point L683(lines 683 691) no Hoare annotation was computed. [2021-12-06 22:52:41,112 INFO L858 garLoopResultBuilder]: For program point L679(lines 679 696) no Hoare annotation was computed. [2021-12-06 22:52:41,112 INFO L858 garLoopResultBuilder]: For program point L498-1(lines 494 505) no Hoare annotation was computed. [2021-12-06 22:52:41,112 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 494 505) the Hoare annotation is: (let ((.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse3 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 .cse2 .cse3))) [2021-12-06 22:52:41,112 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 494 505) no Hoare annotation was computed. [2021-12-06 22:52:41,113 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 931 960) no Hoare annotation was computed. [2021-12-06 22:52:41,113 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 931 960) the Hoare annotation is: true [2021-12-06 22:52:41,113 INFO L861 garLoopResultBuilder]: At program point L956(lines 931 960) the Hoare annotation is: true [2021-12-06 22:52:41,113 INFO L858 garLoopResultBuilder]: For program point L952(line 952) no Hoare annotation was computed. [2021-12-06 22:52:41,113 INFO L858 garLoopResultBuilder]: For program point L945(lines 945 949) no Hoare annotation was computed. [2021-12-06 22:52:41,113 INFO L861 garLoopResultBuilder]: At program point L945-1(lines 945 949) the Hoare annotation is: true [2021-12-06 22:52:41,113 INFO L858 garLoopResultBuilder]: For program point L942(line 942) no Hoare annotation was computed. [2021-12-06 22:52:41,113 INFO L861 garLoopResultBuilder]: At program point L941-2(lines 941 955) the Hoare annotation is: true [2021-12-06 22:52:41,113 INFO L861 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: true [2021-12-06 22:52:41,113 INFO L858 garLoopResultBuilder]: For program point L937-1(line 937) no Hoare annotation was computed. [2021-12-06 22:52:41,113 INFO L854 garLoopResultBuilder]: At program point L543(lines 538 546) the Hoare annotation is: (let ((.cse8 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse0 .cse3 .cse2 .cse4) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6 .cse7 .cse8) .cse9 .cse1 .cse2 .cse4 (and .cse10 .cse5 .cse6 .cse7 .cse8))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse8) (let ((.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and (<= 1 ~pumpRunning~0) .cse6 .cse11) (and .cse10 .cse5 .cse6 .cse11) .cse1 .cse2 .cse4)) (or .cse9 .cse3 .cse2 .cse4))) [2021-12-06 22:52:41,113 INFO L858 garLoopResultBuilder]: For program point L81(lines 81 87) no Hoare annotation was computed. [2021-12-06 22:52:41,113 INFO L858 garLoopResultBuilder]: For program point L77(lines 77 90) no Hoare annotation was computed. [2021-12-06 22:52:41,113 INFO L854 garLoopResultBuilder]: At program point L77-1(lines 62 94) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse1 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0))) (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not .cse1)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse15 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse16 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse13 (not .cse7)) (.cse3 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (<= 1 ~pumpRunning~0) .cse1 .cse2) .cse3 (and .cse4 .cse5 .cse1 .cse2) .cse6 .cse7 .cse8) (or .cse0 .cse9 (and .cse4 .cse2 .cse10) .cse7 .cse8) (or (and .cse11 .cse5 .cse12 .cse10 .cse13) .cse14 .cse9 (and .cse0 .cse4 .cse5 .cse12 .cse10 .cse13) .cse7 .cse8) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (and .cse15 .cse16) .cse3 .cse6 .cse7) (or (and .cse11 .cse5 .cse15 .cse1 .cse12 .cse16 .cse13) .cse14 (and .cse0 .cse4 .cse5 .cse15 .cse1 .cse12 .cse16 .cse13) .cse3 .cse6 .cse7 .cse8)))) [2021-12-06 22:52:41,114 INFO L854 garLoopResultBuilder]: At program point L775(lines 770 778) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2) (or .cse0 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3 .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse3 .cse1))) [2021-12-06 22:52:41,114 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 617 640) no Hoare annotation was computed. [2021-12-06 22:52:41,114 INFO L858 garLoopResultBuilder]: For program point L709(lines 709 717) no Hoare annotation was computed. [2021-12-06 22:52:41,114 INFO L854 garLoopResultBuilder]: At program point L69(line 69) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse5 .cse6) .cse7 .cse3 .cse4)) (or (and .cse1 .cse5 .cse2) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse7 (and (<= 1 ~pumpRunning~0) .cse2) .cse3 .cse4))) [2021-12-06 22:52:41,114 INFO L858 garLoopResultBuilder]: For program point L69-1(line 69) no Hoare annotation was computed. [2021-12-06 22:52:41,114 INFO L858 garLoopResultBuilder]: For program point L705(lines 705 722) no Hoare annotation was computed. [2021-12-06 22:52:41,114 INFO L858 garLoopResultBuilder]: For program point L474(lines 474 478) no Hoare annotation was computed. [2021-12-06 22:52:41,114 INFO L854 garLoopResultBuilder]: At program point L474-2(lines 470 481) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-06 22:52:41,114 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2021-12-06 22:52:41,114 INFO L858 garLoopResultBuilder]: For program point L628-1(lines 628 634) no Hoare annotation was computed. [2021-12-06 22:52:41,114 INFO L854 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-06 22:52:41,114 INFO L854 garLoopResultBuilder]: At program point L711(line 711) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-06 22:52:41,114 INFO L858 garLoopResultBuilder]: For program point L71(lines 71 91) no Hoare annotation was computed. [2021-12-06 22:52:41,114 INFO L854 garLoopResultBuilder]: At program point L707(line 707) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-06 22:52:41,115 INFO L858 garLoopResultBuilder]: For program point L707-1(line 707) no Hoare annotation was computed. [2021-12-06 22:52:41,115 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2021-12-06 22:52:41,115 INFO L854 garLoopResultBuilder]: At program point L720(line 720) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-06 22:52:41,115 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 617 640) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2 .cse3) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1 .cse2 .cse3))) [2021-12-06 22:52:41,115 INFO L854 garLoopResultBuilder]: At program point L720-1(lines 701 725) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse5 .cse6) .cse7 .cse3 .cse4)) (or (and .cse1 .cse5 .cse2) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse7 (and (<= 1 ~pumpRunning~0) .cse2) .cse3 .cse4))) [2021-12-06 22:52:41,115 INFO L858 garLoopResultBuilder]: For program point L621-1(lines 620 639) no Hoare annotation was computed. [2021-12-06 22:52:41,115 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 617 640) no Hoare annotation was computed. [2021-12-06 22:52:41,115 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-12-06 22:52:41,115 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 506 514) the Hoare annotation is: true [2021-12-06 22:52:41,115 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 506 514) no Hoare annotation was computed. [2021-12-06 22:52:41,115 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 506 514) no Hoare annotation was computed. [2021-12-06 22:52:41,115 INFO L854 garLoopResultBuilder]: At program point L989(lines 985 991) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~11#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 22:52:41,115 INFO L858 garLoopResultBuilder]: For program point L911(lines 911 915) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L854 garLoopResultBuilder]: At program point L589(lines 585 591) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 22:52:41,116 INFO L854 garLoopResultBuilder]: At program point L911-2(lines 903 916) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2021-12-06 22:52:41,116 INFO L858 garLoopResultBuilder]: For program point L874(lines 873 920) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L858 garLoopResultBuilder]: For program point L903(lines 903 916) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L854 garLoopResultBuilder]: At program point L895(line 895) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2021-12-06 22:52:41,116 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L861 garLoopResultBuilder]: At program point L924(lines 863 928) the Hoare annotation is: true [2021-12-06 22:52:41,116 INFO L854 garLoopResultBuilder]: At program point L858(lines 853 860) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2021-12-06 22:52:41,116 INFO L858 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L858 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L858 garLoopResultBuilder]: For program point L875(lines 875 879) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L861 garLoopResultBuilder]: At program point L999(lines 992 1001) the Hoare annotation is: true [2021-12-06 22:52:41,116 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 22:52:41,116 INFO L854 garLoopResultBuilder]: At program point L921(lines 872 922) the Hoare annotation is: false [2021-12-06 22:52:41,117 INFO L858 garLoopResultBuilder]: For program point L1012(lines 1012 1019) no Hoare annotation was computed. [2021-12-06 22:52:41,117 INFO L858 garLoopResultBuilder]: For program point L1012-2(lines 1012 1019) no Hoare annotation was computed. [2021-12-06 22:52:41,117 INFO L858 garLoopResultBuilder]: For program point L893(lines 893 899) no Hoare annotation was computed. [2021-12-06 22:52:41,117 INFO L861 garLoopResultBuilder]: At program point L1021(lines 1002 1024) the Hoare annotation is: true [2021-12-06 22:52:41,117 INFO L854 garLoopResultBuilder]: At program point L604(lines 599 607) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 22:52:41,117 INFO L858 garLoopResultBuilder]: For program point L893-1(lines 893 899) no Hoare annotation was computed. [2021-12-06 22:52:41,117 INFO L854 garLoopResultBuilder]: At program point L918(lines 873 920) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse5 .cse8 .cse6))) [2021-12-06 22:52:41,117 INFO L854 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse5 .cse8 .cse6))) [2021-12-06 22:52:41,117 INFO L854 garLoopResultBuilder]: At program point L596(lines 592 598) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 22:52:41,117 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 649 673) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-06 22:52:41,117 INFO L854 garLoopResultBuilder]: At program point L830(lines 815 833) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and .cse3 .cse1))))) [2021-12-06 22:52:41,117 INFO L854 garLoopResultBuilder]: At program point L731(lines 726 733) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (or .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 .cse2) (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|)) (.cse7 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)))) (or (and .cse5 .cse1 .cse6 .cse7) .cse3 .cse4 .cse0 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) .cse7) .cse2)))) [2021-12-06 22:52:41,117 INFO L858 garLoopResultBuilder]: For program point L824(lines 824 828) no Hoare annotation was computed. [2021-12-06 22:52:41,117 INFO L854 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and (= ~pumpRunning~0 0) .cse1)))) [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point L824-2(lines 824 828) no Hoare annotation was computed. [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point L657(lines 657 665) no Hoare annotation was computed. [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point L653(lines 653 670) no Hoare annotation was computed. [2021-12-06 22:52:41,118 INFO L854 garLoopResultBuilder]: At program point L556(lines 547 560) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and .cse3 .cse1))))) [2021-12-06 22:52:41,118 INFO L854 garLoopResultBuilder]: At program point L668(line 668) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 649 673) no Hoare annotation was computed. [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point L668-1(lines 649 673) no Hoare annotation was computed. [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point L551(lines 551 557) no Hoare annotation was computed. [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point L741(lines 741 747) no Hoare annotation was computed. [2021-12-06 22:52:41,118 INFO L854 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse3 .cse1 .cse4) (not (<= ~waterLevel~0 2)) .cse0 (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) .cse4) .cse2)))) [2021-12-06 22:52:41,118 INFO L854 garLoopResultBuilder]: At program point L741-2(lines 734 750) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (<= ~methaneLevelCritical~0 0)) (.cse7 (not (<= ~waterLevel~0 2))) (.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) (.cse9 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse10 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse5 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (or (not (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|)) (and (< 0 (+ ~methaneLevelCritical~0 1)) .cse12)))) (or (and .cse3 .cse1 .cse4 .cse5) .cse6 (not (<= 1 ~methaneLevelCritical~0)) .cse7 .cse2 (and .cse3 .cse8 .cse9 .cse10 .cse4 .cse11 .cse5))) (let ((.cse13 (<= 1 ~pumpRunning~0)) (.cse14 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|))) (or (and .cse13 .cse1 .cse14 .cse5) .cse6 (not .cse12) .cse7 .cse0 (and .cse13 .cse8 .cse9 .cse14 .cse10 .cse11 .cse5) .cse2)))) [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point L739-1(line 739) no Hoare annotation was computed. [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 482 493) no Hoare annotation was computed. [2021-12-06 22:52:41,118 INFO L858 garLoopResultBuilder]: For program point L486-1(lines 482 493) no Hoare annotation was computed. [2021-12-06 22:52:41,119 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 482 493) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse3 .cse4 .cse6) (or .cse0 .cse5 .cse7 .cse3 .cse4) (or .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse7 .cse3 .cse4 .cse6))) [2021-12-06 22:52:41,119 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 759 769) the Hoare annotation is: true [2021-12-06 22:52:41,119 INFO L861 garLoopResultBuilder]: At program point L764(line 764) the Hoare annotation is: true [2021-12-06 22:52:41,119 INFO L858 garLoopResultBuilder]: For program point L764-1(line 764) no Hoare annotation was computed. [2021-12-06 22:52:41,119 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 759 769) no Hoare annotation was computed. [2021-12-06 22:52:41,119 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 759 769) no Hoare annotation was computed. [2021-12-06 22:52:41,121 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:41,122 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 22:52:41,146 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 10:52:41 BoogieIcfgContainer [2021-12-06 22:52:41,146 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 22:52:41,147 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 22:52:41,147 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 22:52:41,147 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 22:52:41,147 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:52:29" (3/4) ... [2021-12-06 22:52:41,149 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-06 22:52:41,154 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-06 22:52:41,161 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-06 22:52:41,161 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 22:52:41,162 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 22:52:41,162 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 22:52:41,162 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 22:52:41,163 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 22:52:41,163 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 22:52:41,180 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 22:52:41,180 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 22:52:41,180 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2021-12-06 22:52:41,181 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-06 22:52:41,181 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-06 22:52:41,181 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2021-12-06 22:52:41,182 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && !(tmp == 0)) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && !(tmp == 0)) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && !(0 == systemActive))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-06 22:52:41,182 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-06 22:52:41,182 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((((((pumpRunning == 0 && waterLevel <= 1) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && !(tmp == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || ((((((pumpRunning == 0 && tmp == 0) && !(\result == 0)) && 1 <= tmp___0) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && \result == 0) && !(tmp == 0)))) && (((((((((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp) && !(tmp == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((((((1 <= pumpRunning && tmp == 0) && !(\result == 0)) && methaneLevelCritical == tmp) && 1 <= tmp___0) && \result == 0) && !(tmp == 0))) || 0 == systemActive) [2021-12-06 22:52:41,182 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((((((((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp) && !(tmp == 0)) || !(\old(pumpRunning) == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((((((1 <= pumpRunning && tmp == 0) && !(\result == 0)) && methaneLevelCritical == tmp) && 1 <= tmp___0) && \result == 0) && !(tmp == 0))) || 0 == systemActive) [2021-12-06 22:52:41,182 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2021-12-06 22:52:41,183 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) [2021-12-06 22:52:41,183 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2021-12-06 22:52:41,183 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2021-12-06 22:52:41,183 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && tmp == 0) && !(\result == 0)) && 1 <= tmp___0) && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) [2021-12-06 22:52:41,183 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-06 22:52:41,205 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 22:52:41,205 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 22:52:41,205 INFO L158 Benchmark]: Toolchain (without parser) took 12045.08ms. Allocated memory was 121.6MB in the beginning and 192.9MB in the end (delta: 71.3MB). Free memory was 78.3MB in the beginning and 73.7MB in the end (delta: 4.6MB). Peak memory consumption was 77.6MB. Max. memory is 16.1GB. [2021-12-06 22:52:41,206 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 121.6MB. Free memory was 95.8MB in the beginning and 95.7MB in the end (delta: 120.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:52:41,206 INFO L158 Benchmark]: CACSL2BoogieTranslator took 308.60ms. Allocated memory is still 121.6MB. Free memory was 78.1MB in the beginning and 59.0MB in the end (delta: 19.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-06 22:52:41,206 INFO L158 Benchmark]: Boogie Procedure Inliner took 39.49ms. Allocated memory is still 121.6MB. Free memory was 59.0MB in the beginning and 56.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 22:52:41,206 INFO L158 Benchmark]: Boogie Preprocessor took 22.40ms. Allocated memory is still 121.6MB. Free memory was 56.3MB in the beginning and 54.6MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 22:52:41,207 INFO L158 Benchmark]: RCFGBuilder took 391.72ms. Allocated memory is still 121.6MB. Free memory was 54.6MB in the beginning and 82.9MB in the end (delta: -28.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-06 22:52:41,207 INFO L158 Benchmark]: TraceAbstraction took 11219.57ms. Allocated memory was 121.6MB in the beginning and 192.9MB in the end (delta: 71.3MB). Free memory was 82.4MB in the beginning and 82.1MB in the end (delta: 291.5kB). Peak memory consumption was 105.1MB. Max. memory is 16.1GB. [2021-12-06 22:52:41,207 INFO L158 Benchmark]: Witness Printer took 58.23ms. Allocated memory is still 192.9MB. Free memory was 81.0MB in the beginning and 73.7MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-06 22:52:41,209 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 121.6MB. Free memory was 95.8MB in the beginning and 95.7MB in the end (delta: 120.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 308.60ms. Allocated memory is still 121.6MB. Free memory was 78.1MB in the beginning and 59.0MB in the end (delta: 19.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 39.49ms. Allocated memory is still 121.6MB. Free memory was 59.0MB in the beginning and 56.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 22.40ms. Allocated memory is still 121.6MB. Free memory was 56.3MB in the beginning and 54.6MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 391.72ms. Allocated memory is still 121.6MB. Free memory was 54.6MB in the beginning and 82.9MB in the end (delta: -28.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * TraceAbstraction took 11219.57ms. Allocated memory was 121.6MB in the beginning and 192.9MB in the end (delta: 71.3MB). Free memory was 82.4MB in the beginning and 82.1MB in the end (delta: 291.5kB). Peak memory consumption was 105.1MB. Max. memory is 16.1GB. * Witness Printer took 58.23ms. Allocated memory is still 192.9MB. Free memory was 81.0MB in the beginning and 73.7MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 111 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.1s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3985 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3953 mSDsluCounter, 5541 SdHoareTripleChecker+Invalid, 2.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3942 mSDsCounter, 1877 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5574 IncrementalHoareTripleChecker+Invalid, 7451 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1877 mSolverCounterUnsat, 1599 mSDtfsCounter, 5574 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 661 GetRequests, 427 SyntacticMatches, 6 SemanticMatches, 228 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3240 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=906occurred in iteration=9, InterpolantAutomatonStates: 199, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 182 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 2597 PreInvPairs, 2946 NumberOfFragments, 2370 HoareAnnotationTreeSize, 2597 FomulaSimplifications, 3122 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 51 FomulaSimplificationsInter, 20315 FormulaSimplificationTreeSizeReductionInter, 3.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 827 NumberOfCodeBlocks, 827 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 919 ConstructedInterpolants, 0 QuantifiedInterpolants, 2253 SizeOfPredicates, 7 NumberOfNonLiveVariables, 885 ConjunctsInSsa, 30 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 96/135 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && tmp == 0) && !(\result == 0)) && 1 <= tmp___0) && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && !(tmp == 0)) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && !(tmp == 0)) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && !(0 == systemActive))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((((((pumpRunning == 0 && waterLevel <= 1) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && !(tmp == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || ((((((pumpRunning == 0 && tmp == 0) && !(\result == 0)) && 1 <= tmp___0) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && \result == 0) && !(tmp == 0)))) && (((((((((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp) && !(tmp == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((((((1 <= pumpRunning && tmp == 0) && !(\result == 0)) && methaneLevelCritical == tmp) && 1 <= tmp___0) && \result == 0) && !(tmp == 0))) || 0 == systemActive) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((((((((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp) && !(tmp == 0)) || !(\old(pumpRunning) == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((((((1 <= pumpRunning && tmp == 0) && !(\result == 0)) && methaneLevelCritical == tmp) && 1 <= tmp___0) && \result == 0) && !(tmp == 0))) || 0 == systemActive) - InvariantResult [Line: 592]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 931]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 992]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2021-12-06 22:52:41,258 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e6104a7-c149-4fd3-9344-34468334f46c/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE