./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 63182f13 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c --- Real Ultimate output --- This is Ultimate 0.2.1-dev-63182f1 [2021-11-13 18:22:51,509 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-13 18:22:51,511 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-13 18:22:51,569 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-13 18:22:51,570 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-13 18:22:51,574 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-13 18:22:51,576 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-13 18:22:51,580 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-13 18:22:51,583 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-13 18:22:51,591 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-13 18:22:51,592 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-13 18:22:51,594 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-13 18:22:51,595 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-13 18:22:51,598 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-13 18:22:51,601 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-13 18:22:51,610 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-13 18:22:51,611 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-13 18:22:51,612 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-13 18:22:51,615 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-13 18:22:51,617 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-13 18:22:51,619 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-13 18:22:51,623 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-13 18:22:51,626 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-13 18:22:51,628 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-13 18:22:51,639 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-13 18:22:51,640 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-13 18:22:51,640 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-13 18:22:51,642 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-13 18:22:51,643 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-13 18:22:51,645 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-13 18:22:51,646 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-13 18:22:51,647 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-13 18:22:51,649 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-13 18:22:51,650 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-13 18:22:51,652 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-13 18:22:51,652 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-13 18:22:51,653 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-13 18:22:51,654 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-13 18:22:51,654 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-13 18:22:51,655 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-13 18:22:51,656 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-13 18:22:51,661 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-13 18:22:51,712 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-13 18:22:51,713 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-13 18:22:51,713 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-13 18:22:51,714 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-13 18:22:51,715 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-13 18:22:51,716 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-13 18:22:51,716 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-13 18:22:51,717 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-13 18:22:51,717 INFO L138 SettingsManager]: * Use SBE=true [2021-11-13 18:22:51,717 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-13 18:22:51,718 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-13 18:22:51,718 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-13 18:22:51,719 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-13 18:22:51,719 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-13 18:22:51,719 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-13 18:22:51,719 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-13 18:22:51,719 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-13 18:22:51,720 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-13 18:22:51,720 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-13 18:22:51,720 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-13 18:22:51,720 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-13 18:22:51,720 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-13 18:22:51,721 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-13 18:22:51,721 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-13 18:22:51,721 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-13 18:22:51,721 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-13 18:22:51,722 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-13 18:22:51,722 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-13 18:22:51,722 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-13 18:22:51,723 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-13 18:22:51,724 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-13 18:22:51,724 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-13 18:22:51,724 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-13 18:22:51,724 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-13 18:22:51,725 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c [2021-11-13 18:22:52,044 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-13 18:22:52,073 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-13 18:22:52,076 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-13 18:22:52,077 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-13 18:22:52,078 INFO L275 PluginConnector]: CDTParser initialized [2021-11-13 18:22:52,080 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/../../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2021-11-13 18:22:52,144 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/data/5baced9ce/b1841a6d30f04758bc369b8038da0b23/FLAGf75035f53 [2021-11-13 18:22:52,773 INFO L306 CDTParser]: Found 1 translation units. [2021-11-13 18:22:52,773 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2021-11-13 18:22:52,794 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/data/5baced9ce/b1841a6d30f04758bc369b8038da0b23/FLAGf75035f53 [2021-11-13 18:22:53,048 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/data/5baced9ce/b1841a6d30f04758bc369b8038da0b23 [2021-11-13 18:22:53,050 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-13 18:22:53,052 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-13 18:22:53,053 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-13 18:22:53,053 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-13 18:22:53,071 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-13 18:22:53,072 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,073 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1c7d31a3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53, skipping insertion in model container [2021-11-13 18:22:53,074 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,081 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-13 18:22:53,163 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-13 18:22:53,532 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2021-11-13 18:22:53,610 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-13 18:22:53,628 INFO L203 MainTranslator]: Completed pre-run [2021-11-13 18:22:53,703 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2021-11-13 18:22:53,737 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-13 18:22:53,768 INFO L208 MainTranslator]: Completed translation [2021-11-13 18:22:53,768 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53 WrapperNode [2021-11-13 18:22:53,769 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-13 18:22:53,771 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-13 18:22:53,771 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-13 18:22:53,771 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-13 18:22:53,779 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,808 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,851 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-13 18:22:53,852 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-13 18:22:53,852 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-13 18:22:53,852 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-13 18:22:53,861 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,861 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,865 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,866 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,875 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,880 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,883 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,887 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-13 18:22:53,888 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-13 18:22:53,888 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-13 18:22:53,888 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-13 18:22:53,889 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (1/1) ... [2021-11-13 18:22:53,913 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-13 18:22:53,925 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 18:22:53,953 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-13 18:22:53,963 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-13 18:22:53,995 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-13 18:22:53,995 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-13 18:22:53,995 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-13 18:22:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-13 18:22:53,996 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-13 18:22:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-13 18:22:53,996 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-13 18:22:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-13 18:22:53,997 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-13 18:22:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-13 18:22:53,997 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-13 18:22:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-11-13 18:22:53,997 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-11-13 18:22:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-13 18:22:53,998 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-13 18:22:53,998 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-13 18:22:53,998 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-13 18:22:53,998 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-13 18:22:53,998 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-13 18:22:53,999 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-13 18:22:53,999 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-13 18:22:53,999 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-13 18:22:54,843 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-13 18:22:54,844 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-13 18:22:54,846 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 06:22:54 BoogieIcfgContainer [2021-11-13 18:22:54,846 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-13 18:22:54,848 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-13 18:22:54,848 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-13 18:22:54,852 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-13 18:22:54,852 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.11 06:22:53" (1/3) ... [2021-11-13 18:22:54,853 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50d9b22f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.11 06:22:54, skipping insertion in model container [2021-11-13 18:22:54,853 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 06:22:53" (2/3) ... [2021-11-13 18:22:54,854 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50d9b22f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.11 06:22:54, skipping insertion in model container [2021-11-13 18:22:54,854 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 06:22:54" (3/3) ... [2021-11-13 18:22:54,855 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product55.cil.c [2021-11-13 18:22:54,861 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-13 18:22:54,861 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-13 18:22:54,911 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-13 18:22:54,918 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-13 18:22:54,918 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-13 18:22:54,938 INFO L276 IsEmpty]: Start isEmpty. Operand has 109 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-11-13 18:22:54,947 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-13 18:22:54,948 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 18:22:54,948 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:22:54,949 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 18:22:54,954 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 18:22:54,955 INFO L85 PathProgramCache]: Analyzing trace with hash 158818465, now seen corresponding path program 1 times [2021-11-13 18:22:54,964 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 18:22:54,965 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [703178595] [2021-11-13 18:22:54,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:22:54,966 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 18:22:55,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:55,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-13 18:22:55,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:55,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-13 18:22:55,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:55,308 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 18:22:55,309 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 18:22:55,309 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [703178595] [2021-11-13 18:22:55,310 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [703178595] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 18:22:55,310 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 18:22:55,311 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-13 18:22:55,312 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [332300077] [2021-11-13 18:22:55,313 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 18:22:55,318 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-13 18:22:55,318 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 18:22:55,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-13 18:22:55,370 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-13 18:22:55,373 INFO L87 Difference]: Start difference. First operand has 109 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 18:22:55,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 18:22:55,411 INFO L93 Difference]: Finished difference Result 209 states and 284 transitions. [2021-11-13 18:22:55,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-13 18:22:55,413 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-11-13 18:22:55,414 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 18:22:55,424 INFO L225 Difference]: With dead ends: 209 [2021-11-13 18:22:55,424 INFO L226 Difference]: Without dead ends: 100 [2021-11-13 18:22:55,428 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-13 18:22:55,433 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.00ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.15ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.00ms IncrementalHoareTripleChecker+Time [2021-11-13 18:22:55,434 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 2.15ms Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.00ms Time] [2021-11-13 18:22:55,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2021-11-13 18:22:55,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2021-11-13 18:22:55,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-11-13 18:22:55,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 130 transitions. [2021-11-13 18:22:55,484 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 130 transitions. Word has length 32 [2021-11-13 18:22:55,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 18:22:55,484 INFO L470 AbstractCegarLoop]: Abstraction has 100 states and 130 transitions. [2021-11-13 18:22:55,485 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 18:22:55,485 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 130 transitions. [2021-11-13 18:22:55,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-11-13 18:22:55,488 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 18:22:55,489 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:22:55,489 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-13 18:22:55,489 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 18:22:55,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 18:22:55,490 INFO L85 PathProgramCache]: Analyzing trace with hash -1314152562, now seen corresponding path program 1 times [2021-11-13 18:22:55,490 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 18:22:55,491 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1270831804] [2021-11-13 18:22:55,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:22:55,491 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 18:22:55,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:55,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-13 18:22:55,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:55,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-13 18:22:55,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:55,649 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 18:22:55,650 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 18:22:55,650 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1270831804] [2021-11-13 18:22:55,650 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1270831804] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 18:22:55,651 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 18:22:55,651 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-13 18:22:55,651 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [499972950] [2021-11-13 18:22:55,651 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 18:22:55,653 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-13 18:22:55,653 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 18:22:55,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-13 18:22:55,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-13 18:22:55,654 INFO L87 Difference]: Start difference. First operand 100 states and 130 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 18:22:55,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 18:22:55,681 INFO L93 Difference]: Finished difference Result 161 states and 209 transitions. [2021-11-13 18:22:55,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-13 18:22:55,682 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-11-13 18:22:55,684 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 18:22:55,689 INFO L225 Difference]: With dead ends: 161 [2021-11-13 18:22:55,691 INFO L226 Difference]: Without dead ends: 91 [2021-11-13 18:22:55,692 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-13 18:22:55,696 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 16 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.25ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 4.03ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.49ms IncrementalHoareTripleChecker+Time [2021-11-13 18:22:55,699 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 213 Invalid, 1 Unknown, 0 Unchecked, 4.03ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 1.49ms Time] [2021-11-13 18:22:55,700 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2021-11-13 18:22:55,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2021-11-13 18:22:55,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 78 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-11-13 18:22:55,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 118 transitions. [2021-11-13 18:22:55,724 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 118 transitions. Word has length 33 [2021-11-13 18:22:55,724 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 18:22:55,725 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 118 transitions. [2021-11-13 18:22:55,726 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 18:22:55,727 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 118 transitions. [2021-11-13 18:22:55,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-11-13 18:22:55,735 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 18:22:55,735 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:22:55,736 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-13 18:22:55,736 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 18:22:55,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 18:22:55,737 INFO L85 PathProgramCache]: Analyzing trace with hash -1623741410, now seen corresponding path program 1 times [2021-11-13 18:22:55,737 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 18:22:55,738 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1653591323] [2021-11-13 18:22:55,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:22:55,738 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 18:22:55,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:55,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-13 18:22:55,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:55,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-11-13 18:22:55,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:55,900 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 18:22:55,900 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 18:22:55,901 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1653591323] [2021-11-13 18:22:55,901 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1653591323] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 18:22:55,901 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 18:22:55,901 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 18:22:55,901 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1760729436] [2021-11-13 18:22:55,902 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 18:22:55,902 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 18:22:55,903 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 18:22:55,903 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 18:22:55,904 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-11-13 18:22:55,905 INFO L87 Difference]: Start difference. First operand 91 states and 118 transitions. Second operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-13 18:22:56,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 18:22:56,285 INFO L93 Difference]: Finished difference Result 303 states and 400 transitions. [2021-11-13 18:22:56,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-13 18:22:56,287 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-11-13 18:22:56,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 18:22:56,290 INFO L225 Difference]: With dead ends: 303 [2021-11-13 18:22:56,290 INFO L226 Difference]: Without dead ends: 220 [2021-11-13 18:22:56,292 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-13 18:22:56,293 INFO L933 BasicCegarLoop]: 153 mSDtfsCounter, 240 mSDsluCounter, 430 mSDsCounter, 0 mSdLazyCounter, 131 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 215.31ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 240 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 13.34ms SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 131 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 276.95ms IncrementalHoareTripleChecker+Time [2021-11-13 18:22:56,294 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [240 Valid, 583 Invalid, 145 Unknown, 0 Unchecked, 13.34ms Time], IncrementalHoareTripleChecker [14 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 276.95ms Time] [2021-11-13 18:22:56,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2021-11-13 18:22:56,353 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 214. [2021-11-13 18:22:56,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 214 states, 158 states have (on average 1.3481012658227849) internal successors, (213), 180 states have internal predecessors, (213), 34 states have call successors, (34), 21 states have call predecessors, (34), 21 states have return successors, (35), 22 states have call predecessors, (35), 34 states have call successors, (35) [2021-11-13 18:22:56,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 282 transitions. [2021-11-13 18:22:56,356 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 282 transitions. Word has length 37 [2021-11-13 18:22:56,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 18:22:56,357 INFO L470 AbstractCegarLoop]: Abstraction has 214 states and 282 transitions. [2021-11-13 18:22:56,357 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-13 18:22:56,357 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 282 transitions. [2021-11-13 18:22:56,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-11-13 18:22:56,359 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 18:22:56,359 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:22:56,360 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-13 18:22:56,360 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 18:22:56,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 18:22:56,360 INFO L85 PathProgramCache]: Analyzing trace with hash 1317125140, now seen corresponding path program 1 times [2021-11-13 18:22:56,361 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 18:22:56,361 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1368306562] [2021-11-13 18:22:56,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:22:56,361 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 18:22:56,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:56,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-13 18:22:56,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:56,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-11-13 18:22:56,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:56,510 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-13 18:22:56,510 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 18:22:56,511 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1368306562] [2021-11-13 18:22:56,511 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1368306562] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 18:22:56,511 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 18:22:56,512 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 18:22:56,512 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1818544850] [2021-11-13 18:22:56,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 18:22:56,513 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 18:22:56,513 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 18:22:56,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 18:22:56,514 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-13 18:22:56,514 INFO L87 Difference]: Start difference. First operand 214 states and 282 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 18:22:56,749 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 18:22:56,749 INFO L93 Difference]: Finished difference Result 526 states and 713 transitions. [2021-11-13 18:22:56,749 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-13 18:22:56,750 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-11-13 18:22:56,750 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 18:22:56,762 INFO L225 Difference]: With dead ends: 526 [2021-11-13 18:22:56,762 INFO L226 Difference]: Without dead ends: 320 [2021-11-13 18:22:56,766 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-13 18:22:56,773 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 56 mSDsluCounter, 430 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 146.89ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 562 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 6.08ms SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 176.63ms IncrementalHoareTripleChecker+Time [2021-11-13 18:22:56,773 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 562 Invalid, 91 Unknown, 0 Unchecked, 6.08ms Time], IncrementalHoareTripleChecker [13 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 176.63ms Time] [2021-11-13 18:22:56,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 320 states. [2021-11-13 18:22:56,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 320 to 303. [2021-11-13 18:22:56,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 225 states have (on average 1.2844444444444445) internal successors, (289), 244 states have internal predecessors, (289), 43 states have call successors, (43), 34 states have call predecessors, (43), 34 states have return successors, (57), 38 states have call predecessors, (57), 43 states have call successors, (57) [2021-11-13 18:22:56,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 389 transitions. [2021-11-13 18:22:56,846 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 389 transitions. Word has length 41 [2021-11-13 18:22:56,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 18:22:56,847 INFO L470 AbstractCegarLoop]: Abstraction has 303 states and 389 transitions. [2021-11-13 18:22:56,847 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 18:22:56,847 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 389 transitions. [2021-11-13 18:22:56,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-13 18:22:56,851 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 18:22:56,851 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:22:56,851 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-13 18:22:56,851 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 18:22:56,852 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 18:22:56,852 INFO L85 PathProgramCache]: Analyzing trace with hash -1401707673, now seen corresponding path program 1 times [2021-11-13 18:22:56,852 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 18:22:56,852 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [151790793] [2021-11-13 18:22:56,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:22:56,852 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 18:22:56,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:56,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-13 18:22:56,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:56,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-13 18:22:56,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:56,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 18:22:56,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:56,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-13 18:22:56,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:56,995 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 18:22:56,995 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 18:22:57,002 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [151790793] [2021-11-13 18:22:57,002 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [151790793] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 18:22:57,002 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 18:22:57,003 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 18:22:57,003 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [807935970] [2021-11-13 18:22:57,003 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 18:22:57,005 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 18:22:57,005 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 18:22:57,006 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 18:22:57,006 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-13 18:22:57,006 INFO L87 Difference]: Start difference. First operand 303 states and 389 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-13 18:22:57,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 18:22:57,276 INFO L93 Difference]: Finished difference Result 666 states and 868 transitions. [2021-11-13 18:22:57,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-13 18:22:57,277 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-11-13 18:22:57,278 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 18:22:57,282 INFO L225 Difference]: With dead ends: 666 [2021-11-13 18:22:57,282 INFO L226 Difference]: Without dead ends: 371 [2021-11-13 18:22:57,284 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-13 18:22:57,288 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 74 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 147.68ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 456 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 7.66ms SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 179.74ms IncrementalHoareTripleChecker+Time [2021-11-13 18:22:57,289 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 456 Invalid, 151 Unknown, 0 Unchecked, 7.66ms Time], IncrementalHoareTripleChecker [25 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 179.74ms Time] [2021-11-13 18:22:57,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2021-11-13 18:22:57,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 363. [2021-11-13 18:22:57,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 363 states, 271 states have (on average 1.2656826568265682) internal successors, (343), 290 states have internal predecessors, (343), 47 states have call successors, (47), 34 states have call predecessors, (47), 44 states have return successors, (71), 50 states have call predecessors, (71), 47 states have call successors, (71) [2021-11-13 18:22:57,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 363 states to 363 states and 461 transitions. [2021-11-13 18:22:57,334 INFO L78 Accepts]: Start accepts. Automaton has 363 states and 461 transitions. Word has length 56 [2021-11-13 18:22:57,335 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 18:22:57,335 INFO L470 AbstractCegarLoop]: Abstraction has 363 states and 461 transitions. [2021-11-13 18:22:57,335 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-13 18:22:57,335 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 461 transitions. [2021-11-13 18:22:57,336 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-13 18:22:57,336 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 18:22:57,337 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:22:57,337 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-13 18:22:57,337 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 18:22:57,337 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 18:22:57,337 INFO L85 PathProgramCache]: Analyzing trace with hash -979005847, now seen corresponding path program 1 times [2021-11-13 18:22:57,338 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 18:22:57,338 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [682543094] [2021-11-13 18:22:57,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:22:57,338 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 18:22:57,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-13 18:22:57,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-13 18:22:57,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 18:22:57,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-13 18:22:57,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,478 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 18:22:57,478 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 18:22:57,478 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [682543094] [2021-11-13 18:22:57,478 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [682543094] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 18:22:57,478 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 18:22:57,479 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-13 18:22:57,480 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2142080148] [2021-11-13 18:22:57,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 18:22:57,481 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-13 18:22:57,481 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 18:22:57,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-13 18:22:57,482 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-13 18:22:57,482 INFO L87 Difference]: Start difference. First operand 363 states and 461 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-13 18:22:57,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 18:22:57,686 INFO L93 Difference]: Finished difference Result 736 states and 963 transitions. [2021-11-13 18:22:57,686 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-13 18:22:57,687 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-11-13 18:22:57,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 18:22:57,693 INFO L225 Difference]: With dead ends: 736 [2021-11-13 18:22:57,694 INFO L226 Difference]: Without dead ends: 381 [2021-11-13 18:22:57,695 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-13 18:22:57,698 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 78 mSDsluCounter, 244 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 136.36ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 355 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.90ms SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 163.88ms IncrementalHoareTripleChecker+Time [2021-11-13 18:22:57,700 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [82 Valid, 355 Invalid, 115 Unknown, 0 Unchecked, 2.90ms Time], IncrementalHoareTripleChecker [22 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 163.88ms Time] [2021-11-13 18:22:57,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2021-11-13 18:22:57,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 367. [2021-11-13 18:22:57,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 367 states, 275 states have (on average 1.2618181818181817) internal successors, (347), 294 states have internal predecessors, (347), 47 states have call successors, (47), 34 states have call predecessors, (47), 44 states have return successors, (71), 50 states have call predecessors, (71), 47 states have call successors, (71) [2021-11-13 18:22:57,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 367 states to 367 states and 465 transitions. [2021-11-13 18:22:57,742 INFO L78 Accepts]: Start accepts. Automaton has 367 states and 465 transitions. Word has length 56 [2021-11-13 18:22:57,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 18:22:57,742 INFO L470 AbstractCegarLoop]: Abstraction has 367 states and 465 transitions. [2021-11-13 18:22:57,743 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-13 18:22:57,743 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states and 465 transitions. [2021-11-13 18:22:57,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-13 18:22:57,745 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 18:22:57,746 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:22:57,746 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-13 18:22:57,746 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 18:22:57,746 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 18:22:57,747 INFO L85 PathProgramCache]: Analyzing trace with hash 1510523115, now seen corresponding path program 1 times [2021-11-13 18:22:57,747 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 18:22:57,747 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [678388061] [2021-11-13 18:22:57,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:22:57,747 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 18:22:57,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-13 18:22:57,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-13 18:22:57,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 18:22:57,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-13 18:22:57,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:57,863 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 18:22:57,863 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 18:22:57,863 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [678388061] [2021-11-13 18:22:57,863 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [678388061] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 18:22:57,863 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 18:22:57,864 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-13 18:22:57,864 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2124221644] [2021-11-13 18:22:57,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 18:22:57,865 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-13 18:22:57,866 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 18:22:57,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-13 18:22:57,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-13 18:22:57,866 INFO L87 Difference]: Start difference. First operand 367 states and 465 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-13 18:22:58,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 18:22:58,359 INFO L93 Difference]: Finished difference Result 1088 states and 1432 transitions. [2021-11-13 18:22:58,360 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-13 18:22:58,360 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-11-13 18:22:58,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 18:22:58,368 INFO L225 Difference]: With dead ends: 1088 [2021-11-13 18:22:58,368 INFO L226 Difference]: Without dead ends: 729 [2021-11-13 18:22:58,370 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-13 18:22:58,371 INFO L933 BasicCegarLoop]: 166 mSDtfsCounter, 242 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 363.09ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 249 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 5.52ms SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 422.37ms IncrementalHoareTripleChecker+Time [2021-11-13 18:22:58,372 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [249 Valid, 381 Invalid, 253 Unknown, 0 Unchecked, 5.52ms Time], IncrementalHoareTripleChecker [77 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 422.37ms Time] [2021-11-13 18:22:58,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 729 states. [2021-11-13 18:22:58,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 729 to 722. [2021-11-13 18:22:58,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 722 states, 539 states have (on average 1.228200371057514) internal successors, (662), 570 states have internal predecessors, (662), 98 states have call successors, (98), 79 states have call predecessors, (98), 84 states have return successors, (157), 98 states have call predecessors, (157), 98 states have call successors, (157) [2021-11-13 18:22:58,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 722 states to 722 states and 917 transitions. [2021-11-13 18:22:58,461 INFO L78 Accepts]: Start accepts. Automaton has 722 states and 917 transitions. Word has length 56 [2021-11-13 18:22:58,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 18:22:58,461 INFO L470 AbstractCegarLoop]: Abstraction has 722 states and 917 transitions. [2021-11-13 18:22:58,462 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-13 18:22:58,462 INFO L276 IsEmpty]: Start isEmpty. Operand 722 states and 917 transitions. [2021-11-13 18:22:58,464 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-13 18:22:58,464 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 18:22:58,464 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:22:58,465 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-13 18:22:58,465 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 18:22:58,465 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 18:22:58,465 INFO L85 PathProgramCache]: Analyzing trace with hash -193074427, now seen corresponding path program 1 times [2021-11-13 18:22:58,465 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 18:22:58,466 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [203716286] [2021-11-13 18:22:58,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:22:58,466 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 18:22:58,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:58,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 18:22:58,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:58,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-13 18:22:58,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:58,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-13 18:22:58,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:58,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 18:22:58,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:58,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-11-13 18:22:58,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:58,677 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 18:22:58,677 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 18:22:58,678 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [203716286] [2021-11-13 18:22:58,678 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [203716286] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 18:22:58,678 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 18:22:58,678 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-13 18:22:58,678 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1417652053] [2021-11-13 18:22:58,678 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 18:22:58,679 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-13 18:22:58,679 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 18:22:58,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-13 18:22:58,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-11-13 18:22:58,680 INFO L87 Difference]: Start difference. First operand 722 states and 917 transitions. Second operand has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-13 18:22:59,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 18:22:59,788 INFO L93 Difference]: Finished difference Result 1938 states and 2583 transitions. [2021-11-13 18:22:59,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-13 18:22:59,789 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2021-11-13 18:22:59,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 18:22:59,799 INFO L225 Difference]: With dead ends: 1938 [2021-11-13 18:22:59,799 INFO L226 Difference]: Without dead ends: 1371 [2021-11-13 18:22:59,803 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-11-13 18:22:59,804 INFO L933 BasicCegarLoop]: 158 mSDtfsCounter, 796 mSDsluCounter, 446 mSDsCounter, 0 mSdLazyCounter, 630 mSolverCounterSat, 318 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 572.46ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 804 SdHoareTripleChecker+Valid, 604 SdHoareTripleChecker+Invalid, 948 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 11.65ms SdHoareTripleChecker+Time, 318 IncrementalHoareTripleChecker+Valid, 630 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 684.72ms IncrementalHoareTripleChecker+Time [2021-11-13 18:22:59,804 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [804 Valid, 604 Invalid, 948 Unknown, 0 Unchecked, 11.65ms Time], IncrementalHoareTripleChecker [318 Valid, 630 Invalid, 0 Unknown, 0 Unchecked, 684.72ms Time] [2021-11-13 18:22:59,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1371 states. [2021-11-13 18:22:59,879 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1371 to 1104. [2021-11-13 18:22:59,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1104 states, 826 states have (on average 1.2167070217917675) internal successors, (1005), 881 states have internal predecessors, (1005), 147 states have call successors, (147), 110 states have call predecessors, (147), 130 states have return successors, (239), 144 states have call predecessors, (239), 147 states have call successors, (239) [2021-11-13 18:22:59,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1104 states to 1104 states and 1391 transitions. [2021-11-13 18:22:59,890 INFO L78 Accepts]: Start accepts. Automaton has 1104 states and 1391 transitions. Word has length 60 [2021-11-13 18:22:59,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 18:22:59,891 INFO L470 AbstractCegarLoop]: Abstraction has 1104 states and 1391 transitions. [2021-11-13 18:22:59,891 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-13 18:22:59,891 INFO L276 IsEmpty]: Start isEmpty. Operand 1104 states and 1391 transitions. [2021-11-13 18:22:59,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2021-11-13 18:22:59,894 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 18:22:59,894 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:22:59,895 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-13 18:22:59,895 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 18:22:59,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 18:22:59,895 INFO L85 PathProgramCache]: Analyzing trace with hash 1799468227, now seen corresponding path program 1 times [2021-11-13 18:22:59,895 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 18:22:59,896 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1880613181] [2021-11-13 18:22:59,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:22:59,896 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 18:22:59,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:59,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 18:22:59,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:22:59,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-13 18:22:59,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 18:23:00,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-13 18:23:00,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 18:23:00,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-11-13 18:23:00,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-11-13 18:23:00,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-13 18:23:00,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 18:23:00,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-11-13 18:23:00,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,059 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 17 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-13 18:23:00,059 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 18:23:00,059 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1880613181] [2021-11-13 18:23:00,060 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1880613181] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-13 18:23:00,060 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1534613502] [2021-11-13 18:23:00,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 18:23:00,060 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 18:23:00,060 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 18:23:00,066 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-13 18:23:00,088 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-13 18:23:00,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 18:23:00,227 INFO L263 TraceCheckSpWp]: Trace formula consists of 562 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-13 18:23:00,244 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-13 18:23:00,737 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 26 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 18:23:00,737 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-13 18:23:01,036 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-13 18:23:01,037 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1534613502] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-13 18:23:01,037 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-13 18:23:01,037 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-11-13 18:23:01,038 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1357713687] [2021-11-13 18:23:01,038 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-13 18:23:01,039 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-11-13 18:23:01,039 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 18:23:01,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-11-13 18:23:01,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-11-13 18:23:01,040 INFO L87 Difference]: Start difference. First operand 1104 states and 1391 transitions. Second operand has 16 states, 16 states have (on average 8.4375) internal successors, (135), 11 states have internal predecessors, (135), 5 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 5 states have call successors, (19) [2021-11-13 18:23:02,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 18:23:02,832 INFO L93 Difference]: Finished difference Result 2327 states and 3020 transitions. [2021-11-13 18:23:02,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-11-13 18:23:02,833 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 8.4375) internal successors, (135), 11 states have internal predecessors, (135), 5 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 5 states have call successors, (19) Word has length 109 [2021-11-13 18:23:02,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 18:23:02,835 INFO L225 Difference]: With dead ends: 2327 [2021-11-13 18:23:02,835 INFO L226 Difference]: Without dead ends: 0 [2021-11-13 18:23:02,843 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 247 SyntacticMatches, 1 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 392 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=301, Invalid=1421, Unknown=0, NotChecked=0, Total=1722 [2021-11-13 18:23:02,844 INFO L933 BasicCegarLoop]: 235 mSDtfsCounter, 465 mSDsluCounter, 1160 mSDsCounter, 0 mSdLazyCounter, 1185 mSolverCounterSat, 214 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1135.08ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 466 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 1399 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 13.93ms SdHoareTripleChecker+Time, 214 IncrementalHoareTripleChecker+Valid, 1185 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1313.12ms IncrementalHoareTripleChecker+Time [2021-11-13 18:23:02,844 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [466 Valid, 1395 Invalid, 1399 Unknown, 0 Unchecked, 13.93ms Time], IncrementalHoareTripleChecker [214 Valid, 1185 Invalid, 0 Unknown, 0 Unchecked, 1313.12ms Time] [2021-11-13 18:23:02,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-13 18:23:02,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-13 18:23:02,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-13 18:23:02,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-13 18:23:02,846 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 109 [2021-11-13 18:23:02,846 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 18:23:02,846 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-13 18:23:02,846 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 8.4375) internal successors, (135), 11 states have internal predecessors, (135), 5 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 5 states have call successors, (19) [2021-11-13 18:23:02,847 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-13 18:23:02,847 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-13 18:23:02,849 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-13 18:23:02,888 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-13 18:23:03,062 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 18:23:03,064 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-13 18:23:09,350 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 871 878) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 18:23:09,351 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 871 878) no Hoare annotation was computed. [2021-11-13 18:23:09,351 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 871 878) no Hoare annotation was computed. [2021-11-13 18:23:09,351 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 778 784) no Hoare annotation was computed. [2021-11-13 18:23:09,351 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 778 784) the Hoare annotation is: true [2021-11-13 18:23:09,352 INFO L858 garLoopResultBuilder]: For program point L670-1(lines 666 677) no Hoare annotation was computed. [2021-11-13 18:23:09,352 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 666 677) the Hoare annotation is: true [2021-11-13 18:23:09,352 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 666 677) no Hoare annotation was computed. [2021-11-13 18:23:09,352 INFO L854 garLoopResultBuilder]: At program point L1018(line 1018) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2) (let ((.cse5 (<= ~waterLevel~0 2))) (or .cse3 (and .cse4 .cse5 .cse6) .cse7 .cse1 (and .cse8 .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse3 (and .cse8 .cse9 .cse6) .cse7 .cse1 .cse2 (and .cse4 .cse9 .cse6))) (or .cse0 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2021-11-13 18:23:09,354 INFO L854 garLoopResultBuilder]: At program point L857(line 857) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not .cse1)) .cse2))) [2021-11-13 18:23:09,354 INFO L858 garLoopResultBuilder]: For program point L1018-1(line 1018) no Hoare annotation was computed. [2021-11-13 18:23:09,354 INFO L854 garLoopResultBuilder]: At program point L857-1(lines 838 862) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (let ((.cse2 (<= ~waterLevel~0 2))) (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5 (and .cse6 .cse2 .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse7 (= ~waterLevel~0 1))) (or .cse0 (and .cse6 .cse7 .cse3) .cse4 .cse5 (not (<= 2 |old(~waterLevel~0)|)) (and .cse1 .cse7 .cse3))) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (not .cse4))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse8 .cse9) (and .cse1 .cse8 .cse9) .cse5)))) [2021-11-13 18:23:09,354 INFO L858 garLoopResultBuilder]: For program point L758(lines 758 764) no Hoare annotation was computed. [2021-11-13 18:23:09,355 INFO L854 garLoopResultBuilder]: At program point L886(lines 879 889) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-13 18:23:09,355 INFO L858 garLoopResultBuilder]: For program point L758-2(lines 754 776) no Hoare annotation was computed. [2021-11-13 18:23:09,355 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 751 777) no Hoare annotation was computed. [2021-11-13 18:23:09,355 INFO L858 garLoopResultBuilder]: For program point L561(line 561) no Hoare annotation was computed. [2021-11-13 18:23:09,355 INFO L858 garLoopResultBuilder]: For program point L846(lines 846 854) no Hoare annotation was computed. [2021-11-13 18:23:09,357 INFO L854 garLoopResultBuilder]: At program point L1003(line 1003) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-11-13 18:23:09,357 INFO L858 garLoopResultBuilder]: For program point L1003-1(line 1003) no Hoare annotation was computed. [2021-11-13 18:23:09,357 INFO L858 garLoopResultBuilder]: For program point L842(lines 842 859) no Hoare annotation was computed. [2021-11-13 18:23:09,358 INFO L858 garLoopResultBuilder]: For program point L1020(lines 1020 1030) no Hoare annotation was computed. [2021-11-13 18:23:09,358 INFO L858 garLoopResultBuilder]: For program point L1016(lines 1016 1033) no Hoare annotation was computed. [2021-11-13 18:23:09,358 INFO L854 garLoopResultBuilder]: At program point L1016-1(lines 1008 1036) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not .cse5)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse2 (<= ~waterLevel~0 2))) (or .cse0 (and .cse1 .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse2 .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse8 (and .cse1 .cse9) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse9 .cse4) .cse6)) (or .cse8 .cse6 (and (<= |timeShift_getWaterLevel_#res#1| 2) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse10) (let ((.cse11 (= ~waterLevel~0 1))) (or (and .cse1 .cse11 .cse3 .cse4) .cse0 (and .cse7 .cse11 .cse3) .cse5 .cse6 .cse10))))) [2021-11-13 18:23:09,359 INFO L854 garLoopResultBuilder]: At program point L562(lines 557 564) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 .cse2 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse2 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-13 18:23:09,359 INFO L854 garLoopResultBuilder]: At program point L715(lines 710 718) the Hoare annotation is: (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse1 .cse2) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2 (not .cse3)) .cse4)) (let ((.cse6 (<= ~waterLevel~0 2))) (or .cse5 (and .cse1 .cse6 .cse7) .cse3 .cse4 (and .cse8 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse5 (and .cse8 .cse9 .cse7) .cse3 .cse4 .cse10 (and .cse1 .cse9 .cse7))) (or .cse0 .cse4 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse10))) [2021-11-13 18:23:09,359 INFO L858 garLoopResultBuilder]: For program point L1021(lines 1021 1027) no Hoare annotation was computed. [2021-11-13 18:23:09,360 INFO L858 garLoopResultBuilder]: For program point L765-1(lines 765 771) no Hoare annotation was computed. [2021-11-13 18:23:09,360 INFO L854 garLoopResultBuilder]: At program point L852(line 852) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-13 18:23:09,360 INFO L854 garLoopResultBuilder]: At program point L848(line 848) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-13 18:23:09,360 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 751 777) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-11-13 18:23:09,360 INFO L854 garLoopResultBuilder]: At program point L1005(lines 998 1007) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse4) .cse3)))) [2021-11-13 18:23:09,361 INFO L854 garLoopResultBuilder]: At program point L683(lines 678 686) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-13 18:23:09,361 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 751 777) no Hoare annotation was computed. [2021-11-13 18:23:09,361 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 561) no Hoare annotation was computed. [2021-11-13 18:23:09,361 INFO L858 garLoopResultBuilder]: For program point L646(lines 646 650) no Hoare annotation was computed. [2021-11-13 18:23:09,361 INFO L854 garLoopResultBuilder]: At program point L646-2(lines 642 653) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-13 18:23:09,362 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2021-11-13 18:23:09,362 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 418 447) the Hoare annotation is: true [2021-11-13 18:23:09,362 INFO L861 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2021-11-13 18:23:09,362 INFO L858 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2021-11-13 18:23:09,362 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2021-11-13 18:23:09,362 INFO L861 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2021-11-13 18:23:09,362 INFO L858 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2021-11-13 18:23:09,363 INFO L861 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2021-11-13 18:23:09,363 INFO L861 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2021-11-13 18:23:09,363 INFO L858 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2021-11-13 18:23:09,364 INFO L854 garLoopResultBuilder]: At program point L985(lines 973 987) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= |ULTIMATE.start_main_~tmp~3#1| 1)) [2021-11-13 18:23:09,364 INFO L858 garLoopResultBuilder]: For program point L597(lines 597 603) no Hoare annotation was computed. [2021-11-13 18:23:09,365 INFO L858 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2021-11-13 18:23:09,366 INFO L858 garLoopResultBuilder]: For program point L977(lines 977 983) no Hoare annotation was computed. [2021-11-13 18:23:09,366 INFO L858 garLoopResultBuilder]: For program point L977-1(lines 977 983) no Hoare annotation was computed. [2021-11-13 18:23:09,366 INFO L854 garLoopResultBuilder]: At program point L622(lines 577 624) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2021-11-13 18:23:09,366 INFO L854 garLoopResultBuilder]: At program point L589(line 589) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2021-11-13 18:23:09,366 INFO L854 garLoopResultBuilder]: At program point L552(lines 547 555) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-13 18:23:09,367 INFO L854 garLoopResultBuilder]: At program point L544(lines 540 546) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-13 18:23:09,367 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-13 18:23:09,367 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-13 18:23:09,367 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-13 18:23:09,367 INFO L854 garLoopResultBuilder]: At program point L995(lines 990 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1)) [2021-11-13 18:23:09,368 INFO L858 garLoopResultBuilder]: For program point L578(lines 577 624) no Hoare annotation was computed. [2021-11-13 18:23:09,368 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-13 18:23:09,368 INFO L854 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1)) [2021-11-13 18:23:09,368 INFO L858 garLoopResultBuilder]: For program point L607(lines 607 620) no Hoare annotation was computed. [2021-11-13 18:23:09,369 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2021-11-13 18:23:09,369 INFO L858 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2021-11-13 18:23:09,369 INFO L854 garLoopResultBuilder]: At program point L537(lines 533 539) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-13 18:23:09,369 INFO L854 garLoopResultBuilder]: At program point L599(line 599) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2021-11-13 18:23:09,371 INFO L861 garLoopResultBuilder]: At program point L628(lines 567 632) the Hoare annotation is: true [2021-11-13 18:23:09,371 INFO L854 garLoopResultBuilder]: At program point L979(line 979) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2021-11-13 18:23:09,371 INFO L861 garLoopResultBuilder]: At program point L492(lines 484 494) the Hoare annotation is: true [2021-11-13 18:23:09,371 INFO L858 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2021-11-13 18:23:09,372 INFO L858 garLoopResultBuilder]: For program point L587-1(lines 587 593) no Hoare annotation was computed. [2021-11-13 18:23:09,372 INFO L861 garLoopResultBuilder]: At program point L517(lines 498 520) the Hoare annotation is: true [2021-11-13 18:23:09,372 INFO L858 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2021-11-13 18:23:09,372 INFO L854 garLoopResultBuilder]: At program point L625(lines 576 626) the Hoare annotation is: false [2021-11-13 18:23:09,372 INFO L858 garLoopResultBuilder]: For program point L613(lines 613 619) no Hoare annotation was computed. [2021-11-13 18:23:09,372 INFO L854 garLoopResultBuilder]: At program point L613-2(lines 607 620) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2021-11-13 18:23:09,373 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 786 810) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-11-13 18:23:09,373 INFO L854 garLoopResultBuilder]: At program point L950(lines 935 953) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse1 (and .cse0 (<= 2 ~waterLevel~0)) .cse2)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 18:23:09,373 INFO L858 garLoopResultBuilder]: For program point L723(lines 723 729) no Hoare annotation was computed. [2021-11-13 18:23:09,374 INFO L858 garLoopResultBuilder]: For program point L944(lines 944 948) no Hoare annotation was computed. [2021-11-13 18:23:09,374 INFO L858 garLoopResultBuilder]: For program point L944-2(lines 944 948) no Hoare annotation was computed. [2021-11-13 18:23:09,374 INFO L854 garLoopResultBuilder]: At program point L868(lines 863 870) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2021-11-13 18:23:09,374 INFO L854 garLoopResultBuilder]: At program point L800(line 800) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)) .cse0 .cse1))) [2021-11-13 18:23:09,374 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 786 810) no Hoare annotation was computed. [2021-11-13 18:23:09,375 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 802) no Hoare annotation was computed. [2021-11-13 18:23:09,375 INFO L854 garLoopResultBuilder]: At program point L728(lines 719 732) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2))))) [2021-11-13 18:23:09,375 INFO L858 garLoopResultBuilder]: For program point L790(lines 790 807) no Hoare annotation was computed. [2021-11-13 18:23:09,375 INFO L854 garLoopResultBuilder]: At program point L805(line 805) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 18:23:09,375 INFO L858 garLoopResultBuilder]: For program point L805-1(lines 786 810) no Hoare annotation was computed. [2021-11-13 18:23:09,375 INFO L858 garLoopResultBuilder]: For program point L658-1(lines 654 665) no Hoare annotation was computed. [2021-11-13 18:23:09,376 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 654 665) no Hoare annotation was computed. [2021-11-13 18:23:09,376 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 654 665) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse1 .cse3))) [2021-11-13 18:23:09,376 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 812 836) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-11-13 18:23:09,376 INFO L854 garLoopResultBuilder]: At program point L826(line 826) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 18:23:09,376 INFO L854 garLoopResultBuilder]: At program point L822(line 822) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 18:23:09,376 INFO L858 garLoopResultBuilder]: For program point L820(lines 820 828) no Hoare annotation was computed. [2021-11-13 18:23:09,377 INFO L858 garLoopResultBuilder]: For program point L816(lines 816 833) no Hoare annotation was computed. [2021-11-13 18:23:09,377 INFO L854 garLoopResultBuilder]: At program point L969(lines 954 972) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 18:23:09,377 INFO L858 garLoopResultBuilder]: For program point L963(lines 963 967) no Hoare annotation was computed. [2021-11-13 18:23:09,377 INFO L854 garLoopResultBuilder]: At program point L738(lines 733 741) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 18:23:09,377 INFO L858 garLoopResultBuilder]: For program point L963-2(lines 963 967) no Hoare annotation was computed. [2021-11-13 18:23:09,377 INFO L854 garLoopResultBuilder]: At program point L831(line 831) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-11-13 18:23:09,378 INFO L858 garLoopResultBuilder]: For program point L831-1(lines 812 836) no Hoare annotation was computed. [2021-11-13 18:23:09,378 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 812 836) no Hoare annotation was computed. [2021-11-13 18:23:09,378 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 890 898) no Hoare annotation was computed. [2021-11-13 18:23:09,378 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 890 898) the Hoare annotation is: true [2021-11-13 18:23:09,378 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 890 898) no Hoare annotation was computed. [2021-11-13 18:23:09,382 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 18:23:09,383 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-13 18:23:09,438 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.11 06:23:09 BoogieIcfgContainer [2021-11-13 18:23:09,449 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-13 18:23:09,449 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-13 18:23:09,450 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-13 18:23:09,450 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-13 18:23:09,450 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 06:22:54" (3/4) ... [2021-11-13 18:23:09,453 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-13 18:23:09,460 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-13 18:23:09,460 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-13 18:23:09,461 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-13 18:23:09,461 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-13 18:23:09,461 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-13 18:23:09,461 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-13 18:23:09,462 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-13 18:23:09,462 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-11-13 18:23:09,462 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-13 18:23:09,478 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2021-11-13 18:23:09,482 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-13 18:23:09,483 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-13 18:23:09,484 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-13 18:23:09,484 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-13 18:23:09,485 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-13 18:23:09,486 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-13 18:23:09,509 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-11-13 18:23:09,510 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == 1) && waterLevel == 1 [2021-11-13 18:23:09,510 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == 1) && waterLevel == 1 [2021-11-13 18:23:09,510 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) [2021-11-13 18:23:09,511 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2021-11-13 18:23:09,512 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-13 18:23:09,512 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-13 18:23:09,512 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) [2021-11-13 18:23:09,513 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-13 18:23:09,513 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1 [2021-11-13 18:23:09,513 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) [2021-11-13 18:23:09,514 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-13 18:23:09,514 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-13 18:23:09,514 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-11-13 18:23:09,515 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) [2021-11-13 18:23:09,515 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-11-13 18:23:09,515 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-11-13 18:23:09,516 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-11-13 18:23:09,545 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/witness.graphml [2021-11-13 18:23:09,545 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-13 18:23:09,546 INFO L158 Benchmark]: Toolchain (without parser) took 16493.85ms. Allocated memory was 109.1MB in the beginning and 192.9MB in the end (delta: 83.9MB). Free memory was 78.8MB in the beginning and 54.9MB in the end (delta: 23.9MB). Peak memory consumption was 106.9MB. Max. memory is 16.1GB. [2021-11-13 18:23:09,546 INFO L158 Benchmark]: CDTParser took 0.37ms. Allocated memory is still 109.1MB. Free memory is still 62.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-13 18:23:09,546 INFO L158 Benchmark]: CACSL2BoogieTranslator took 716.13ms. Allocated memory is still 109.1MB. Free memory was 78.5MB in the beginning and 74.0MB in the end (delta: 4.6MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-13 18:23:09,547 INFO L158 Benchmark]: Boogie Procedure Inliner took 80.79ms. Allocated memory is still 109.1MB. Free memory was 74.0MB in the beginning and 71.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-13 18:23:09,547 INFO L158 Benchmark]: Boogie Preprocessor took 35.23ms. Allocated memory is still 109.1MB. Free memory was 71.4MB in the beginning and 69.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-13 18:23:09,547 INFO L158 Benchmark]: RCFGBuilder took 958.43ms. Allocated memory was 109.1MB in the beginning and 132.1MB in the end (delta: 23.1MB). Free memory was 69.3MB in the beginning and 84.4MB in the end (delta: -15.0MB). Peak memory consumption was 24.1MB. Max. memory is 16.1GB. [2021-11-13 18:23:09,548 INFO L158 Benchmark]: TraceAbstraction took 14601.02ms. Allocated memory was 132.1MB in the beginning and 192.9MB in the end (delta: 60.8MB). Free memory was 84.4MB in the beginning and 62.3MB in the end (delta: 22.1MB). Peak memory consumption was 96.2MB. Max. memory is 16.1GB. [2021-11-13 18:23:09,548 INFO L158 Benchmark]: Witness Printer took 95.53ms. Allocated memory is still 192.9MB. Free memory was 62.3MB in the beginning and 54.9MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-13 18:23:09,550 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.37ms. Allocated memory is still 109.1MB. Free memory is still 62.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 716.13ms. Allocated memory is still 109.1MB. Free memory was 78.5MB in the beginning and 74.0MB in the end (delta: 4.6MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 80.79ms. Allocated memory is still 109.1MB. Free memory was 74.0MB in the beginning and 71.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 35.23ms. Allocated memory is still 109.1MB. Free memory was 71.4MB in the beginning and 69.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 958.43ms. Allocated memory was 109.1MB in the beginning and 132.1MB in the end (delta: 23.1MB). Free memory was 69.3MB in the beginning and 84.4MB in the end (delta: -15.0MB). Peak memory consumption was 24.1MB. Max. memory is 16.1GB. * TraceAbstraction took 14601.02ms. Allocated memory was 132.1MB in the beginning and 192.9MB in the end (delta: 60.8MB). Free memory was 84.4MB in the beginning and 62.3MB in the end (delta: 22.1MB). Peak memory consumption was 96.2MB. Max. memory is 16.1GB. * Witness Printer took 95.53ms. Allocated memory is still 192.9MB. Free memory was 62.3MB in the beginning and 54.9MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 561]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 109 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.5s, OverallIterations: 9, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1995 SdHoareTripleChecker+Valid, 3218.89ms IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1967 mSDsluCounter, 4688 SdHoareTripleChecker+Invalid, 2718.12ms Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3366 mSDsCounter, 683 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2420 IncrementalHoareTripleChecker+Invalid, 3103 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 683 mSolverCounterUnsat, 1322 mSDtfsCounter, 2420 mSolverCounterSat, 67.27ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 423 GetRequests, 317 SyntacticMatches, 2 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 681 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1104occurred in iteration=8, InterpolantAutomatonStates: 99, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 9 MinimizatonAttempts, 319 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 2331 PreInvPairs, 2901 NumberOfFragments, 1992 HoareAnnotationTreeSize, 2331 FomulaSimplifications, 2901 FormulaSimplificationTreeSizeReduction, 0.9s HoareSimplificationTime, 51 FomulaSimplificationsInter, 23440 FormulaSimplificationTreeSizeReductionInter, 5.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 589 NumberOfCodeBlocks, 589 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 687 ConstructedInterpolants, 0 QuantifiedInterpolants, 1389 SizeOfPredicates, 3 NumberOfNonLiveVariables, 562 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 11 InterpolantComputations, 8 PerfectInterpolantSequences, 103/135 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 990]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == 1) && waterLevel == 1 - InvariantResult [Line: 935]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 557]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 642]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 710]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: (((((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 838]: Loop Invariant Derived loop invariant: ((((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == 1) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-11-13 18:23:09,624 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_06aef254-2065-4a7c-beb5-b4c47d2cb846/bin/uautomizer-YU5uOKAj3y/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE