./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 07:10:15,919 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 07:10:15,921 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 07:10:15,971 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 07:10:15,972 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 07:10:15,973 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 07:10:15,975 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 07:10:15,977 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 07:10:15,979 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 07:10:15,980 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 07:10:15,982 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 07:10:15,983 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 07:10:15,984 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 07:10:15,985 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 07:10:15,987 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 07:10:15,989 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 07:10:15,990 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 07:10:15,991 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 07:10:15,994 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 07:10:15,996 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 07:10:15,999 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 07:10:16,000 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 07:10:16,002 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 07:10:16,003 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 07:10:16,007 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 07:10:16,008 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 07:10:16,009 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 07:10:16,010 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 07:10:16,011 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 07:10:16,012 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 07:10:16,012 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 07:10:16,013 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 07:10:16,015 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 07:10:16,016 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 07:10:16,017 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 07:10:16,018 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 07:10:16,019 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 07:10:16,019 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 07:10:16,020 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 07:10:16,021 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 07:10:16,022 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 07:10:16,022 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 07:10:16,048 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 07:10:16,049 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 07:10:16,049 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 07:10:16,051 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 07:10:16,051 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 07:10:16,052 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 07:10:16,052 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 07:10:16,053 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 07:10:16,053 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 07:10:16,053 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 07:10:16,053 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 07:10:16,054 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 07:10:16,054 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 07:10:16,054 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 07:10:16,054 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 07:10:16,055 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 07:10:16,055 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 07:10:16,055 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 07:10:16,055 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 07:10:16,056 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 07:10:16,056 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 07:10:16,056 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 07:10:16,056 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 07:10:16,057 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 07:10:16,057 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:10:16,057 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 07:10:16,057 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 07:10:16,058 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 07:10:16,058 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 07:10:16,058 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 07:10:16,058 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 07:10:16,059 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 07:10:16,059 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 07:10:16,059 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 07:10:16,059 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 [2021-11-20 07:10:16,329 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 07:10:16,367 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 07:10:16,370 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 07:10:16,372 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 07:10:16,373 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 07:10:16,376 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2021-11-20 07:10:16,458 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/data/84612385c/fde4ee0fe9aa42cebd2f48ba394608d1/FLAG7fdd210c4 [2021-11-20 07:10:16,980 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 07:10:16,988 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2021-11-20 07:10:17,023 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/data/84612385c/fde4ee0fe9aa42cebd2f48ba394608d1/FLAG7fdd210c4 [2021-11-20 07:10:17,284 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/data/84612385c/fde4ee0fe9aa42cebd2f48ba394608d1 [2021-11-20 07:10:17,288 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 07:10:17,291 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 07:10:17,293 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 07:10:17,293 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 07:10:17,297 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 07:10:17,297 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,298 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@32418718 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17, skipping insertion in model container [2021-11-20 07:10:17,299 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,305 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 07:10:17,352 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 07:10:17,561 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2021-11-20 07:10:17,610 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:10:17,619 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 07:10:17,660 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2021-11-20 07:10:17,716 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:10:17,743 INFO L208 MainTranslator]: Completed translation [2021-11-20 07:10:17,744 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17 WrapperNode [2021-11-20 07:10:17,744 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 07:10:17,745 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 07:10:17,745 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 07:10:17,746 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 07:10:17,753 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,780 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,836 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 262 [2021-11-20 07:10:17,836 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 07:10:17,837 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 07:10:17,837 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 07:10:17,837 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 07:10:17,846 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,846 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,859 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,867 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,886 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,891 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,893 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,896 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 07:10:17,897 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 07:10:17,897 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 07:10:17,897 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 07:10:17,898 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (1/1) ... [2021-11-20 07:10:17,919 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:10:17,933 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:10:17,951 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 07:10:17,981 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 07:10:18,000 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 07:10:18,001 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 07:10:18,001 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 07:10:18,001 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-11-20 07:10:18,001 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-11-20 07:10:18,001 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 07:10:18,002 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 07:10:18,003 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 07:10:18,004 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 07:10:18,004 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 07:10:18,004 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 07:10:18,004 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 07:10:18,005 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 07:10:18,005 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-20 07:10:18,005 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-20 07:10:18,005 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 07:10:18,005 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 07:10:18,005 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 07:10:18,006 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 07:10:18,006 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 07:10:18,113 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 07:10:18,115 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 07:10:18,513 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 07:10:18,522 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 07:10:18,522 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 07:10:18,524 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:10:18 BoogieIcfgContainer [2021-11-20 07:10:18,524 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 07:10:18,526 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 07:10:18,526 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 07:10:18,530 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 07:10:18,530 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 07:10:17" (1/3) ... [2021-11-20 07:10:18,531 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@613f37da and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:10:18, skipping insertion in model container [2021-11-20 07:10:18,531 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:10:17" (2/3) ... [2021-11-20 07:10:18,532 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@613f37da and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:10:18, skipping insertion in model container [2021-11-20 07:10:18,532 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:10:18" (3/3) ... [2021-11-20 07:10:18,533 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product51.cil.c [2021-11-20 07:10:18,539 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 07:10:18,540 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 07:10:18,587 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 07:10:18,594 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 07:10:18,595 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 07:10:18,619 INFO L276 IsEmpty]: Start isEmpty. Operand has 95 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-11-20 07:10:18,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-11-20 07:10:18,627 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:18,627 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:18,628 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:18,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:18,634 INFO L85 PathProgramCache]: Analyzing trace with hash -6194419, now seen corresponding path program 1 times [2021-11-20 07:10:18,644 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:18,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1599574398] [2021-11-20 07:10:18,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:18,646 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:18,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:18,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 07:10:18,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:18,884 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:18,884 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:18,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1599574398] [2021-11-20 07:10:18,885 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1599574398] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:18,886 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:10:18,886 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 07:10:18,888 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [683523856] [2021-11-20 07:10:18,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:18,893 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 07:10:18,893 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:18,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 07:10:18,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 07:10:18,926 INFO L87 Difference]: Start difference. First operand has 95 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:10:19,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:19,006 INFO L93 Difference]: Finished difference Result 181 states and 246 transitions. [2021-11-20 07:10:19,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 07:10:19,008 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-11-20 07:10:19,009 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:19,019 INFO L225 Difference]: With dead ends: 181 [2021-11-20 07:10:19,019 INFO L226 Difference]: Without dead ends: 86 [2021-11-20 07:10:19,024 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 07:10:19,028 INFO L933 BasicCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:19,029 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:10:19,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2021-11-20 07:10:19,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2021-11-20 07:10:19,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 65 states have (on average 1.323076923076923) internal successors, (86), 73 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2021-11-20 07:10:19,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2021-11-20 07:10:19,078 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 25 [2021-11-20 07:10:19,078 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:19,079 INFO L470 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2021-11-20 07:10:19,080 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:10:19,080 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2021-11-20 07:10:19,084 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-11-20 07:10:19,084 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:19,084 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:19,085 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 07:10:19,085 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:19,086 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:19,087 INFO L85 PathProgramCache]: Analyzing trace with hash -1341011652, now seen corresponding path program 1 times [2021-11-20 07:10:19,087 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:19,087 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1849111410] [2021-11-20 07:10:19,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:19,089 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:19,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:19,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-20 07:10:19,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:19,234 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:19,235 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:19,235 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1849111410] [2021-11-20 07:10:19,236 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1849111410] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:19,236 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:10:19,237 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 07:10:19,237 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2147464392] [2021-11-20 07:10:19,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:19,239 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:10:19,240 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:19,240 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:10:19,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:10:19,241 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:10:19,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:19,268 INFO L93 Difference]: Finished difference Result 133 states and 171 transitions. [2021-11-20 07:10:19,269 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:10:19,269 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-11-20 07:10:19,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:19,271 INFO L225 Difference]: With dead ends: 133 [2021-11-20 07:10:19,271 INFO L226 Difference]: Without dead ends: 77 [2021-11-20 07:10:19,278 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:10:19,280 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 16 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:19,281 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 175 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:10:19,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2021-11-20 07:10:19,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2021-11-20 07:10:19,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 67 states have internal predecessors, (79), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2021-11-20 07:10:19,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 99 transitions. [2021-11-20 07:10:19,294 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 99 transitions. Word has length 26 [2021-11-20 07:10:19,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:19,295 INFO L470 AbstractCegarLoop]: Abstraction has 77 states and 99 transitions. [2021-11-20 07:10:19,295 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:10:19,295 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 99 transitions. [2021-11-20 07:10:19,297 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-11-20 07:10:19,297 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:19,297 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:19,297 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 07:10:19,297 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:19,298 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:19,298 INFO L85 PathProgramCache]: Analyzing trace with hash 1026962067, now seen corresponding path program 1 times [2021-11-20 07:10:19,298 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:19,299 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1839040499] [2021-11-20 07:10:19,299 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:19,299 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:19,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:19,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:10:19,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:19,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:19,445 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:19,446 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1839040499] [2021-11-20 07:10:19,446 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1839040499] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:19,446 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:10:19,446 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 07:10:19,447 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1598793745] [2021-11-20 07:10:19,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:19,447 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:10:19,447 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:19,448 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:10:19,448 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:10:19,449 INFO L87 Difference]: Start difference. First operand 77 states and 99 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:10:19,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:19,730 INFO L93 Difference]: Finished difference Result 257 states and 338 transitions. [2021-11-20 07:10:19,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:10:19,731 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-11-20 07:10:19,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:19,734 INFO L225 Difference]: With dead ends: 257 [2021-11-20 07:10:19,734 INFO L226 Difference]: Without dead ends: 188 [2021-11-20 07:10:19,735 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:10:19,737 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 267 mSDsluCounter, 330 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 267 SdHoareTripleChecker+Valid, 453 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:19,738 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [267 Valid, 453 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:10:19,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2021-11-20 07:10:19,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 182. [2021-11-20 07:10:19,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 137 states have (on average 1.3722627737226278) internal successors, (188), 155 states have internal predecessors, (188), 25 states have call successors, (25), 19 states have call predecessors, (25), 19 states have return successors, (26), 17 states have call predecessors, (26), 25 states have call successors, (26) [2021-11-20 07:10:19,775 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 239 transitions. [2021-11-20 07:10:19,775 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 239 transitions. Word has length 30 [2021-11-20 07:10:19,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:19,775 INFO L470 AbstractCegarLoop]: Abstraction has 182 states and 239 transitions. [2021-11-20 07:10:19,776 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:10:19,776 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 239 transitions. [2021-11-20 07:10:19,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-11-20 07:10:19,778 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:19,778 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:19,779 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 07:10:19,779 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:19,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:19,780 INFO L85 PathProgramCache]: Analyzing trace with hash 591965277, now seen corresponding path program 1 times [2021-11-20 07:10:19,780 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:19,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [577879966] [2021-11-20 07:10:19,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:19,780 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:19,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:19,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 07:10:19,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:19,861 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:19,862 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:19,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [577879966] [2021-11-20 07:10:19,862 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [577879966] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:19,862 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:10:19,863 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:10:19,863 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1693002999] [2021-11-20 07:10:19,863 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:19,863 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:10:19,864 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:19,864 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:10:19,864 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:10:19,865 INFO L87 Difference]: Start difference. First operand 182 states and 239 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:10:19,940 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:19,940 INFO L93 Difference]: Finished difference Result 446 states and 601 transitions. [2021-11-20 07:10:19,940 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:10:19,941 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-11-20 07:10:19,941 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:19,945 INFO L225 Difference]: With dead ends: 446 [2021-11-20 07:10:19,945 INFO L226 Difference]: Without dead ends: 272 [2021-11-20 07:10:19,948 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:10:19,949 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 57 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 383 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:19,950 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 383 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:10:19,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2021-11-20 07:10:20,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 255. [2021-11-20 07:10:20,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 192 states have (on average 1.3125) internal successors, (252), 209 states have internal predecessors, (252), 32 states have call successors, (32), 30 states have call predecessors, (32), 30 states have return successors, (42), 29 states have call predecessors, (42), 32 states have call successors, (42) [2021-11-20 07:10:20,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 326 transitions. [2021-11-20 07:10:20,027 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 326 transitions. Word has length 34 [2021-11-20 07:10:20,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:20,027 INFO L470 AbstractCegarLoop]: Abstraction has 255 states and 326 transitions. [2021-11-20 07:10:20,028 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-11-20 07:10:20,028 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 326 transitions. [2021-11-20 07:10:20,038 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-11-20 07:10:20,038 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:20,038 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:20,039 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 07:10:20,039 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:20,041 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:20,041 INFO L85 PathProgramCache]: Analyzing trace with hash -2050243753, now seen corresponding path program 1 times [2021-11-20 07:10:20,041 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:20,042 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1576874177] [2021-11-20 07:10:20,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:20,043 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:20,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:20,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:10:20,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:20,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 07:10:20,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:20,187 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:20,188 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:20,189 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1576874177] [2021-11-20 07:10:20,192 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1576874177] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:20,192 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:10:20,192 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 07:10:20,192 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [995093028] [2021-11-20 07:10:20,193 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:20,195 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:10:20,196 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:20,196 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:10:20,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:10:20,198 INFO L87 Difference]: Start difference. First operand 255 states and 326 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:10:20,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:20,400 INFO L93 Difference]: Finished difference Result 562 states and 730 transitions. [2021-11-20 07:10:20,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:10:20,401 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2021-11-20 07:10:20,401 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:20,410 INFO L225 Difference]: With dead ends: 562 [2021-11-20 07:10:20,410 INFO L226 Difference]: Without dead ends: 315 [2021-11-20 07:10:20,412 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:10:20,420 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 63 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 379 SdHoareTripleChecker+Invalid, 127 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:20,421 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [65 Valid, 379 Invalid, 127 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:10:20,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 315 states. [2021-11-20 07:10:20,475 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 315 to 307. [2021-11-20 07:10:20,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 234 states have (on average 1.2905982905982907) internal successors, (302), 251 states have internal predecessors, (302), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (52), 37 states have call predecessors, (52), 36 states have call successors, (52) [2021-11-20 07:10:20,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 390 transitions. [2021-11-20 07:10:20,480 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 390 transitions. Word has length 44 [2021-11-20 07:10:20,480 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:20,480 INFO L470 AbstractCegarLoop]: Abstraction has 307 states and 390 transitions. [2021-11-20 07:10:20,481 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:10:20,481 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 390 transitions. [2021-11-20 07:10:20,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-11-20 07:10:20,483 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:20,483 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:20,483 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 07:10:20,483 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:20,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:20,484 INFO L85 PathProgramCache]: Analyzing trace with hash 555779801, now seen corresponding path program 1 times [2021-11-20 07:10:20,484 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:20,484 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2134126715] [2021-11-20 07:10:20,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:20,485 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:20,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:20,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:10:20,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:20,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 07:10:20,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:20,558 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:20,558 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:20,558 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2134126715] [2021-11-20 07:10:20,559 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2134126715] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:20,559 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:10:20,559 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 07:10:20,559 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [739514540] [2021-11-20 07:10:20,559 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:20,560 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 07:10:20,560 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:20,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 07:10:20,561 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:10:20,561 INFO L87 Difference]: Start difference. First operand 307 states and 390 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 6 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:10:20,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:20,755 INFO L93 Difference]: Finished difference Result 624 states and 813 transitions. [2021-11-20 07:10:20,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:10:20,756 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 6 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2021-11-20 07:10:20,756 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:20,759 INFO L225 Difference]: With dead ends: 624 [2021-11-20 07:10:20,759 INFO L226 Difference]: Without dead ends: 325 [2021-11-20 07:10:20,761 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:10:20,762 INFO L933 BasicCegarLoop]: 92 mSDtfsCounter, 107 mSDsluCounter, 316 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 110 SdHoareTripleChecker+Valid, 408 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:20,762 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [110 Valid, 408 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:10:20,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2021-11-20 07:10:20,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 311. [2021-11-20 07:10:20,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 238 states have (on average 1.2857142857142858) internal successors, (306), 255 states have internal predecessors, (306), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (52), 37 states have call predecessors, (52), 36 states have call successors, (52) [2021-11-20 07:10:20,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 394 transitions. [2021-11-20 07:10:20,790 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 394 transitions. Word has length 44 [2021-11-20 07:10:20,790 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:20,790 INFO L470 AbstractCegarLoop]: Abstraction has 311 states and 394 transitions. [2021-11-20 07:10:20,791 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 6 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:10:20,791 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 394 transitions. [2021-11-20 07:10:20,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-11-20 07:10:20,793 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:20,793 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:20,793 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 07:10:20,793 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:20,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:20,794 INFO L85 PathProgramCache]: Analyzing trace with hash 978481627, now seen corresponding path program 1 times [2021-11-20 07:10:20,794 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:20,794 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [888954529] [2021-11-20 07:10:20,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:20,795 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:20,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:20,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:10:20,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:20,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 07:10:20,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:20,852 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:20,852 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:20,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [888954529] [2021-11-20 07:10:20,852 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [888954529] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:20,853 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:10:20,853 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:10:20,853 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [406557392] [2021-11-20 07:10:20,853 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:20,854 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:10:20,854 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:20,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:10:20,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:10:20,855 INFO L87 Difference]: Start difference. First operand 311 states and 394 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:10:21,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:21,109 INFO L93 Difference]: Finished difference Result 924 states and 1218 transitions. [2021-11-20 07:10:21,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:10:21,110 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2021-11-20 07:10:21,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:21,115 INFO L225 Difference]: With dead ends: 924 [2021-11-20 07:10:21,116 INFO L226 Difference]: Without dead ends: 621 [2021-11-20 07:10:21,118 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:10:21,119 INFO L933 BasicCegarLoop]: 144 mSDtfsCounter, 212 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 331 SdHoareTripleChecker+Invalid, 194 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:21,119 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [218 Valid, 331 Invalid, 194 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:10:21,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 621 states. [2021-11-20 07:10:21,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 621 to 614. [2021-11-20 07:10:21,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 614 states, 466 states have (on average 1.2553648068669527) internal successors, (585), 495 states have internal predecessors, (585), 75 states have call successors, (75), 71 states have call predecessors, (75), 72 states have return successors, (120), 73 states have call predecessors, (120), 75 states have call successors, (120) [2021-11-20 07:10:21,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 780 transitions. [2021-11-20 07:10:21,176 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 780 transitions. Word has length 44 [2021-11-20 07:10:21,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:21,176 INFO L470 AbstractCegarLoop]: Abstraction has 614 states and 780 transitions. [2021-11-20 07:10:21,177 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:10:21,177 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 780 transitions. [2021-11-20 07:10:21,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2021-11-20 07:10:21,179 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:21,179 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:21,179 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 07:10:21,180 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:21,180 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:21,180 INFO L85 PathProgramCache]: Analyzing trace with hash 319309813, now seen corresponding path program 1 times [2021-11-20 07:10:21,181 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:21,181 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1164242711] [2021-11-20 07:10:21,181 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:21,181 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:21,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:10:21,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 07:10:21,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-11-20 07:10:21,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,242 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:21,243 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:21,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1164242711] [2021-11-20 07:10:21,243 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1164242711] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:21,243 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:10:21,243 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:10:21,244 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1683449626] [2021-11-20 07:10:21,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:21,244 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:10:21,244 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:21,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:10:21,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:10:21,245 INFO L87 Difference]: Start difference. First operand 614 states and 780 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 07:10:21,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:21,570 INFO L93 Difference]: Finished difference Result 1205 states and 1620 transitions. [2021-11-20 07:10:21,571 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 07:10:21,571 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 48 [2021-11-20 07:10:21,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:21,580 INFO L225 Difference]: With dead ends: 1205 [2021-11-20 07:10:21,580 INFO L226 Difference]: Without dead ends: 1203 [2021-11-20 07:10:21,582 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-11-20 07:10:21,582 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 294 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 116 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 116 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:21,583 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [298 Valid, 269 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [116 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:10:21,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1203 states. [2021-11-20 07:10:21,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1203 to 1063. [2021-11-20 07:10:21,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1063 states, 808 states have (on average 1.25990099009901) internal successors, (1018), 869 states have internal predecessors, (1018), 134 states have call successors, (134), 104 states have call predecessors, (134), 120 states have return successors, (290), 125 states have call predecessors, (290), 134 states have call successors, (290) [2021-11-20 07:10:21,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1063 states to 1063 states and 1442 transitions. [2021-11-20 07:10:21,703 INFO L78 Accepts]: Start accepts. Automaton has 1063 states and 1442 transitions. Word has length 48 [2021-11-20 07:10:21,703 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:21,703 INFO L470 AbstractCegarLoop]: Abstraction has 1063 states and 1442 transitions. [2021-11-20 07:10:21,706 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 07:10:21,706 INFO L276 IsEmpty]: Start isEmpty. Operand 1063 states and 1442 transitions. [2021-11-20 07:10:21,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2021-11-20 07:10:21,711 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:21,712 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:21,712 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 07:10:21,712 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:21,713 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:21,713 INFO L85 PathProgramCache]: Analyzing trace with hash 706311904, now seen corresponding path program 1 times [2021-11-20 07:10:21,713 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:21,713 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2015046713] [2021-11-20 07:10:21,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:21,714 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:21,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:10:21,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:10:21,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:10:21,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-11-20 07:10:21,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-11-20 07:10:21,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2021-11-20 07:10:21,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:21,879 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-11-20 07:10:21,879 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:21,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2015046713] [2021-11-20 07:10:21,880 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2015046713] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:10:21,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1023845995] [2021-11-20 07:10:21,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:21,881 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:10:21,881 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:10:21,886 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:10:21,904 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 07:10:21,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:22,001 INFO L263 TraceCheckSpWp]: Trace formula consists of 456 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 07:10:22,012 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:10:22,371 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:22,371 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 07:10:22,371 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1023845995] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:22,372 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 07:10:22,372 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2021-11-20 07:10:22,373 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084609327] [2021-11-20 07:10:22,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:22,374 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:10:22,374 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:22,374 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:10:22,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-11-20 07:10:22,375 INFO L87 Difference]: Start difference. First operand 1063 states and 1442 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2021-11-20 07:10:22,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:22,477 INFO L93 Difference]: Finished difference Result 1868 states and 2582 transitions. [2021-11-20 07:10:22,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:10:22,477 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 86 [2021-11-20 07:10:22,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:22,487 INFO L225 Difference]: With dead ends: 1868 [2021-11-20 07:10:22,487 INFO L226 Difference]: Without dead ends: 944 [2021-11-20 07:10:22,493 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 106 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-11-20 07:10:22,496 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 42 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:22,496 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [42 Valid, 206 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:10:22,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 944 states. [2021-11-20 07:10:22,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 944 to 944. [2021-11-20 07:10:22,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 944 states, 716 states have (on average 1.2318435754189945) internal successors, (882), 769 states have internal predecessors, (882), 119 states have call successors, (119), 99 states have call predecessors, (119), 108 states have return successors, (188), 109 states have call predecessors, (188), 119 states have call successors, (188) [2021-11-20 07:10:22,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 944 states to 944 states and 1189 transitions. [2021-11-20 07:10:22,573 INFO L78 Accepts]: Start accepts. Automaton has 944 states and 1189 transitions. Word has length 86 [2021-11-20 07:10:22,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:22,574 INFO L470 AbstractCegarLoop]: Abstraction has 944 states and 1189 transitions. [2021-11-20 07:10:22,574 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2021-11-20 07:10:22,574 INFO L276 IsEmpty]: Start isEmpty. Operand 944 states and 1189 transitions. [2021-11-20 07:10:22,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-11-20 07:10:22,577 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:22,577 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:22,617 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 07:10:22,805 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:10:22,806 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:22,806 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:22,806 INFO L85 PathProgramCache]: Analyzing trace with hash -2067995951, now seen corresponding path program 1 times [2021-11-20 07:10:22,806 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:22,806 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [491382762] [2021-11-20 07:10:22,807 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:22,807 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:22,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:22,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:10:22,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:22,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:10:22,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:22,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:10:22,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:22,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-11-20 07:10:22,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:22,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-11-20 07:10:22,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:22,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:10:22,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:22,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-11-20 07:10:22,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:22,966 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2021-11-20 07:10:22,966 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:22,966 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [491382762] [2021-11-20 07:10:22,966 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [491382762] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:10:22,966 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1287264478] [2021-11-20 07:10:22,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:22,967 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:10:22,967 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:10:22,970 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:10:22,989 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 07:10:23,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,067 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-20 07:10:23,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:10:23,270 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 07:10:23,270 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 07:10:23,270 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1287264478] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:23,270 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 07:10:23,271 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-11-20 07:10:23,271 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [805608288] [2021-11-20 07:10:23,271 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:23,272 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:10:23,273 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:23,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:10:23,273 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2021-11-20 07:10:23,274 INFO L87 Difference]: Start difference. First operand 944 states and 1189 transitions. Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-20 07:10:23,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:23,380 INFO L93 Difference]: Finished difference Result 1821 states and 2347 transitions. [2021-11-20 07:10:23,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 07:10:23,380 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 89 [2021-11-20 07:10:23,381 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:23,388 INFO L225 Difference]: With dead ends: 1821 [2021-11-20 07:10:23,388 INFO L226 Difference]: Without dead ends: 1016 [2021-11-20 07:10:23,392 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2021-11-20 07:10:23,393 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 33 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 400 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:23,394 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [33 Valid, 400 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:10:23,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1016 states. [2021-11-20 07:10:23,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1016 to 968. [2021-11-20 07:10:23,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 968 states, 740 states have (on average 1.2243243243243243) internal successors, (906), 793 states have internal predecessors, (906), 119 states have call successors, (119), 99 states have call predecessors, (119), 108 states have return successors, (188), 109 states have call predecessors, (188), 119 states have call successors, (188) [2021-11-20 07:10:23,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 968 states to 968 states and 1213 transitions. [2021-11-20 07:10:23,478 INFO L78 Accepts]: Start accepts. Automaton has 968 states and 1213 transitions. Word has length 89 [2021-11-20 07:10:23,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:23,480 INFO L470 AbstractCegarLoop]: Abstraction has 968 states and 1213 transitions. [2021-11-20 07:10:23,480 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-20 07:10:23,480 INFO L276 IsEmpty]: Start isEmpty. Operand 968 states and 1213 transitions. [2021-11-20 07:10:23,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-11-20 07:10:23,488 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:23,489 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:23,528 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 07:10:23,710 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-20 07:10:23,710 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:23,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:23,710 INFO L85 PathProgramCache]: Analyzing trace with hash -1933982445, now seen corresponding path program 1 times [2021-11-20 07:10:23,710 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:23,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1280305687] [2021-11-20 07:10:23,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:23,711 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:23,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:10:23,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:10:23,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:10:23,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-11-20 07:10:23,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-11-20 07:10:23,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:10:23,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-11-20 07:10:23,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,849 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 20 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-11-20 07:10:23,849 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:23,849 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1280305687] [2021-11-20 07:10:23,850 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1280305687] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:10:23,850 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1287968631] [2021-11-20 07:10:23,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:23,850 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:10:23,850 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:10:23,854 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:10:23,873 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-20 07:10:23,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:23,972 INFO L263 TraceCheckSpWp]: Trace formula consists of 458 conjuncts, 11 conjunts are in the unsatisfiable core [2021-11-20 07:10:23,976 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:10:24,192 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:10:24,192 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 07:10:24,192 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1287968631] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:24,192 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 07:10:24,193 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2021-11-20 07:10:24,193 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [776899597] [2021-11-20 07:10:24,193 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:24,193 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:10:24,194 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:24,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:10:24,195 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=154, Unknown=0, NotChecked=0, Total=182 [2021-11-20 07:10:24,195 INFO L87 Difference]: Start difference. First operand 968 states and 1213 transitions. Second operand has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2021-11-20 07:10:24,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:24,328 INFO L93 Difference]: Finished difference Result 1540 states and 1945 transitions. [2021-11-20 07:10:24,328 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 07:10:24,328 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 89 [2021-11-20 07:10:24,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:24,334 INFO L225 Difference]: With dead ends: 1540 [2021-11-20 07:10:24,334 INFO L226 Difference]: Without dead ends: 711 [2021-11-20 07:10:24,337 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-11-20 07:10:24,338 INFO L933 BasicCegarLoop]: 150 mSDtfsCounter, 153 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 491 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:24,338 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [153 Valid, 491 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:10:24,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 711 states. [2021-11-20 07:10:24,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 711 to 663. [2021-11-20 07:10:24,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 663 states, 508 states have (on average 1.2224409448818898) internal successors, (621), 540 states have internal predecessors, (621), 75 states have call successors, (75), 73 states have call predecessors, (75), 79 states have return successors, (109), 75 states have call predecessors, (109), 75 states have call successors, (109) [2021-11-20 07:10:24,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 663 states to 663 states and 805 transitions. [2021-11-20 07:10:24,388 INFO L78 Accepts]: Start accepts. Automaton has 663 states and 805 transitions. Word has length 89 [2021-11-20 07:10:24,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:24,388 INFO L470 AbstractCegarLoop]: Abstraction has 663 states and 805 transitions. [2021-11-20 07:10:24,389 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2021-11-20 07:10:24,389 INFO L276 IsEmpty]: Start isEmpty. Operand 663 states and 805 transitions. [2021-11-20 07:10:24,391 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2021-11-20 07:10:24,391 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:10:24,391 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:24,432 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-20 07:10:24,608 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-11-20 07:10:24,608 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:10:24,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:10:24,609 INFO L85 PathProgramCache]: Analyzing trace with hash 692072967, now seen corresponding path program 1 times [2021-11-20 07:10:24,609 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:10:24,609 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1983435811] [2021-11-20 07:10:24,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:24,609 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:10:24,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:24,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:10:24,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:24,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:10:24,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:24,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 07:10:24,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:24,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-11-20 07:10:24,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:24,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-11-20 07:10:24,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:24,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-11-20 07:10:24,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:24,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-11-20 07:10:24,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:24,725 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-11-20 07:10:24,725 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:10:24,725 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1983435811] [2021-11-20 07:10:24,726 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1983435811] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:10:24,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [339244691] [2021-11-20 07:10:24,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:10:24,726 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:10:24,726 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:10:24,730 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:10:24,752 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-20 07:10:24,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:10:24,833 INFO L263 TraceCheckSpWp]: Trace formula consists of 475 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-20 07:10:24,844 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:10:24,994 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-11-20 07:10:24,994 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 07:10:24,995 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [339244691] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:10:24,995 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 07:10:24,995 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 6 [2021-11-20 07:10:24,997 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1803636026] [2021-11-20 07:10:24,998 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:10:24,998 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:10:24,998 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:10:24,999 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:10:24,999 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:10:24,999 INFO L87 Difference]: Start difference. First operand 663 states and 805 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-20 07:10:25,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:10:25,042 INFO L93 Difference]: Finished difference Result 822 states and 1010 transitions. [2021-11-20 07:10:25,042 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:10:25,042 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 94 [2021-11-20 07:10:25,043 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:10:25,043 INFO L225 Difference]: With dead ends: 822 [2021-11-20 07:10:25,043 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 07:10:25,045 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 106 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:10:25,046 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 38 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:10:25,047 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 200 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:10:25,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 07:10:25,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 07:10:25,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 07:10:25,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 07:10:25,049 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 94 [2021-11-20 07:10:25,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:10:25,049 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 07:10:25,049 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-20 07:10:25,049 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 07:10:25,049 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 07:10:25,052 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 07:10:25,093 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-20 07:10:25,273 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-20 07:10:25,275 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 07:10:28,750 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 226 233) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)) (or .cse0 (not (= 1 ~systemActive~0)) .cse1 (not (<= 1 ~waterLevel~0))))) [2021-11-20 07:10:28,750 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 226 233) no Hoare annotation was computed. [2021-11-20 07:10:28,750 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 226 233) no Hoare annotation was computed. [2021-11-20 07:10:28,750 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 159 165) no Hoare annotation was computed. [2021-11-20 07:10:28,751 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 159 165) the Hoare annotation is: true [2021-11-20 07:10:28,751 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 449 460) the Hoare annotation is: true [2021-11-20 07:10:28,751 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2021-11-20 07:10:28,751 INFO L858 garLoopResultBuilder]: For program point L453-1(lines 449 460) no Hoare annotation was computed. [2021-11-20 07:10:28,751 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 461 469) the Hoare annotation is: true [2021-11-20 07:10:28,751 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 461 469) no Hoare annotation was computed. [2021-11-20 07:10:28,751 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 461 469) no Hoare annotation was computed. [2021-11-20 07:10:28,751 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 527 556) no Hoare annotation was computed. [2021-11-20 07:10:28,751 INFO L858 garLoopResultBuilder]: For program point L541(lines 541 545) no Hoare annotation was computed. [2021-11-20 07:10:28,752 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 527 556) the Hoare annotation is: true [2021-11-20 07:10:28,752 INFO L861 garLoopResultBuilder]: At program point L541-1(lines 541 545) the Hoare annotation is: true [2021-11-20 07:10:28,752 INFO L858 garLoopResultBuilder]: For program point L538(line 538) no Hoare annotation was computed. [2021-11-20 07:10:28,752 INFO L861 garLoopResultBuilder]: At program point L537-2(lines 537 551) the Hoare annotation is: true [2021-11-20 07:10:28,752 INFO L861 garLoopResultBuilder]: At program point L533(line 533) the Hoare annotation is: true [2021-11-20 07:10:28,752 INFO L858 garLoopResultBuilder]: For program point L533-1(line 533) no Hoare annotation was computed. [2021-11-20 07:10:28,752 INFO L861 garLoopResultBuilder]: At program point L552(lines 527 556) the Hoare annotation is: true [2021-11-20 07:10:28,752 INFO L858 garLoopResultBuilder]: For program point L548(line 548) no Hoare annotation was computed. [2021-11-20 07:10:28,753 INFO L854 garLoopResultBuilder]: At program point L250(lines 245 253) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2 .cse11)) (.cse8 (not (= 0 ~systemActive~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 .cse2 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse4 .cse5 .cse9 .cse10 .cse8) (or .cse4 .cse5 .cse0 (and (<= 1 ~pumpRunning~0) .cse6 (<= 2 ~waterLevel~0) .cse11) .cse9 (and .cse1 .cse2 .cse11)) (or .cse4 .cse5 .cse6 .cse7 .cse0) (or .cse4 .cse10 .cse8 .cse3)))) [2021-11-20 07:10:28,753 INFO L858 garLoopResultBuilder]: For program point L366(lines 366 376) no Hoare annotation was computed. [2021-11-20 07:10:28,753 INFO L858 garLoopResultBuilder]: For program point L139-1(lines 138 157) no Hoare annotation was computed. [2021-11-20 07:10:28,753 INFO L858 garLoopResultBuilder]: For program point L362(lines 362 379) no Hoare annotation was computed. [2021-11-20 07:10:28,753 INFO L858 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2021-11-20 07:10:28,753 INFO L854 garLoopResultBuilder]: At program point L362-1(lines 354 382) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not .cse8)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and .cse6 .cse7 .cse5)) (.cse3 (not (= 0 ~systemActive~0))) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~waterLevel~0)|)) .cse3) (or .cse0 .cse1 .cse4 (and (<= 1 ~pumpRunning~0) .cse5) (and .cse6 .cse7 .cse8 .cse5) .cse9) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 .cse7 .cse8 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse9) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse4 (and .cse6 .cse7 .cse8 (= ~waterLevel~0 1))) (or .cse0 .cse2 .cse3 .cse9)))) [2021-11-20 07:10:28,753 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 135 158) no Hoare annotation was computed. [2021-11-20 07:10:28,754 INFO L858 garLoopResultBuilder]: For program point L197(lines 197 214) no Hoare annotation was computed. [2021-11-20 07:10:28,754 INFO L858 garLoopResultBuilder]: For program point L627(line 627) no Hoare annotation was computed. [2021-11-20 07:10:28,754 INFO L858 garLoopResultBuilder]: For program point L367(lines 367 373) no Hoare annotation was computed. [2021-11-20 07:10:28,754 INFO L858 garLoopResultBuilder]: For program point L429(lines 429 433) no Hoare annotation was computed. [2021-11-20 07:10:28,754 INFO L854 garLoopResultBuilder]: At program point L429-2(lines 425 436) the Hoare annotation is: (let ((.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse2) (or .cse0 .cse3 .cse5 .cse1))) [2021-11-20 07:10:28,754 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2021-11-20 07:10:28,754 INFO L858 garLoopResultBuilder]: For program point L318-2(lines 318 322) no Hoare annotation was computed. [2021-11-20 07:10:28,754 INFO L854 garLoopResultBuilder]: At program point L628(lines 623 630) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse3 .cse5 .cse1) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2021-11-20 07:10:28,755 INFO L854 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse3 .cse5 .cse1) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2021-11-20 07:10:28,755 INFO L854 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse3 (not (<= 1 |old(~pumpRunning~0)|)) .cse2) (or .cse0 .cse4 .cse3 .cse5) (or .cse0 .cse4 .cse5 .cse1))) [2021-11-20 07:10:28,755 INFO L854 garLoopResultBuilder]: At program point L521(lines 516 524) the Hoare annotation is: (let ((.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) .cse2) (or .cse0 .cse3 .cse5 .cse1))) [2021-11-20 07:10:28,755 INFO L854 garLoopResultBuilder]: At program point L360(line 360) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse7 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9)) (.cse4 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse0 .cse1 (and .cse8 .cse9) .cse7 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse9) .cse10) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse8 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse7 (not (<= 1 |old(~pumpRunning~0)|)) .cse6) (or .cse0 .cse1 .cse10 .cse5 .cse4)))) [2021-11-20 07:10:28,755 INFO L858 garLoopResultBuilder]: For program point L360-1(line 360) no Hoare annotation was computed. [2021-11-20 07:10:28,756 INFO L854 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse5 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2 (= ~waterLevel~0 1)) .cse3 (not (= |old(~waterLevel~0)| 1)) .cse4) (or .cse0 .cse5 .cse6) (or .cse0 .cse3 (not (<= 1 |old(~waterLevel~0)|)) .cse5) (or .cse0 .cse3 .cse4 (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse6) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse6))) [2021-11-20 07:10:28,756 INFO L854 garLoopResultBuilder]: At program point L212-1(lines 193 217) the Hoare annotation is: (let ((.cse4 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse5) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse3 (and .cse6 .cse7) .cse5 (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse7) .cse8)) (or .cse0 .cse3 .cse8 .cse1) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse5 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2021-11-20 07:10:28,756 INFO L858 garLoopResultBuilder]: For program point L146-1(lines 146 152) no Hoare annotation was computed. [2021-11-20 07:10:28,756 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 135 158) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (and .cse4 .cse5 .cse7)) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~waterLevel~0)|)) .cse3) (or .cse0 (and .cse4 .cse5 (= ~waterLevel~0 1)) .cse1 (not (= |old(~waterLevel~0)| 1)) .cse6) (or .cse0 (and .cse4 .cse7) .cse3 .cse8) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7) .cse8) (or .cse0 .cse1 .cse6 .cse2 .cse8)))) [2021-11-20 07:10:28,756 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 135 158) no Hoare annotation was computed. [2021-11-20 07:10:28,756 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 627) no Hoare annotation was computed. [2021-11-20 07:10:28,757 INFO L854 garLoopResultBuilder]: At program point L324(lines 309 327) the Hoare annotation is: (let ((.cse1 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse1) (or .cse2 .cse3 .cse1) (or .cse2 .cse4 .cse0 .cse5) (or .cse2 .cse4 .cse5 .cse3))) [2021-11-20 07:10:28,757 INFO L858 garLoopResultBuilder]: For program point L609(lines 609 616) no Hoare annotation was computed. [2021-11-20 07:10:28,757 INFO L858 garLoopResultBuilder]: For program point L609-2(lines 609 616) no Hoare annotation was computed. [2021-11-20 07:10:28,757 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-11-20 07:10:28,757 INFO L858 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2021-11-20 07:10:28,757 INFO L854 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse6 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse6) (and (= |ULTIMATE.start_main_~tmp~6#1| 1) .cse0 .cse1 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 .cse5 (= 0 ~systemActive~0)))) [2021-11-20 07:10:28,757 INFO L854 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse6 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse6) (and (= |ULTIMATE.start_main_~tmp~6#1| 1) .cse0 .cse1 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 .cse5 (= 0 ~systemActive~0)))) [2021-11-20 07:10:28,757 INFO L861 garLoopResultBuilder]: At program point L618(lines 599 621) the Hoare annotation is: true [2021-11-20 07:10:28,758 INFO L854 garLoopResultBuilder]: At program point L585(lines 581 587) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2021-11-20 07:10:28,758 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 07:10:28,758 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 07:10:28,758 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 07:10:28,758 INFO L854 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (and (<= 1 ~pumpRunning~0) (= |ULTIMATE.start_main_~tmp~6#1| 1) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2021-11-20 07:10:28,758 INFO L858 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2021-11-20 07:10:28,758 INFO L854 garLoopResultBuilder]: At program point L417(lines 412 420) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:10:28,758 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 07:10:28,758 INFO L854 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2021-11-20 07:10:28,759 INFO L858 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2021-11-20 07:10:28,759 INFO L854 garLoopResultBuilder]: At program point L409(lines 405 411) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:10:28,759 INFO L854 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse6 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse6) (and (= |ULTIMATE.start_main_~tmp~6#1| 1) .cse0 .cse1 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 .cse5 (= 0 ~systemActive~0)))) [2021-11-20 07:10:28,759 INFO L861 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2021-11-20 07:10:28,759 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2021-11-20 07:10:28,759 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2021-11-20 07:10:28,759 INFO L858 garLoopResultBuilder]: For program point L67(lines 67 71) no Hoare annotation was computed. [2021-11-20 07:10:28,759 INFO L854 garLoopResultBuilder]: At program point L340(lines 328 342) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~6#1| 1)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (and .cse0 .cse1 (= ~methAndRunningLastTime~0 0) .cse2 .cse3 .cse4 (= ~waterLevel~0 1)))) [2021-11-20 07:10:28,760 INFO L861 garLoopResultBuilder]: At program point L596(lines 588 598) the Hoare annotation is: true [2021-11-20 07:10:28,760 INFO L854 garLoopResultBuilder]: At program point L402(lines 398 404) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:10:28,760 INFO L854 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2021-11-20 07:10:28,760 INFO L858 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2021-11-20 07:10:28,760 INFO L858 garLoopResultBuilder]: For program point L332-1(lines 332 338) no Hoare annotation was computed. [2021-11-20 07:10:28,760 INFO L858 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2021-11-20 07:10:28,760 INFO L854 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (let ((.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) (.cse6 (= |ULTIMATE.start_main_~tmp~6#1| 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse9 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0) .cse5) (and .cse6 .cse0 .cse7 .cse8 .cse4 .cse9) (and (<= 1 ~pumpRunning~0) .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse7 .cse4 .cse9 (= ~waterLevel~0 1)))) [2021-11-20 07:10:28,760 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 167 191) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2021-11-20 07:10:28,761 INFO L854 garLoopResultBuilder]: At program point L223(lines 218 225) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2021-11-20 07:10:28,761 INFO L858 garLoopResultBuilder]: For program point L506(lines 506 512) no Hoare annotation was computed. [2021-11-20 07:10:28,761 INFO L854 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2021-11-20 07:10:28,761 INFO L858 garLoopResultBuilder]: For program point L186-1(lines 167 191) no Hoare annotation was computed. [2021-11-20 07:10:28,761 INFO L854 garLoopResultBuilder]: At program point L511(lines 502 515) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 .cse3 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1)))) [2021-11-20 07:10:28,761 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 167 191) no Hoare annotation was computed. [2021-11-20 07:10:28,761 INFO L854 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) (not (= ~methAndRunningLastTime~0 0))) [2021-11-20 07:10:28,761 INFO L854 garLoopResultBuilder]: At program point L305(lines 290 308) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (and .cse0 (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0)))) [2021-11-20 07:10:28,762 INFO L858 garLoopResultBuilder]: For program point L175(lines 175 183) no Hoare annotation was computed. [2021-11-20 07:10:28,762 INFO L858 garLoopResultBuilder]: For program point L171(lines 171 188) no Hoare annotation was computed. [2021-11-20 07:10:28,762 INFO L858 garLoopResultBuilder]: For program point L299(lines 299 303) no Hoare annotation was computed. [2021-11-20 07:10:28,762 INFO L858 garLoopResultBuilder]: For program point L299-2(lines 299 303) no Hoare annotation was computed. [2021-11-20 07:10:28,762 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2021-11-20 07:10:28,762 INFO L858 garLoopResultBuilder]: For program point L441-1(lines 437 448) no Hoare annotation was computed. [2021-11-20 07:10:28,762 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 437 448) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1) .cse2) (or .cse1 (not (<= 1 ~pumpRunning~0)) .cse3 .cse4) (or .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse3 .cse2 .cse4))) [2021-11-20 07:10:28,765 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:10:28,767 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 07:10:28,796 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 07:10:28 BoogieIcfgContainer [2021-11-20 07:10:28,796 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 07:10:28,797 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 07:10:28,797 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 07:10:28,797 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 07:10:28,797 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:10:18" (3/4) ... [2021-11-20 07:10:28,800 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 07:10:28,806 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-20 07:10:28,806 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 07:10:28,806 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 07:10:28,806 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-11-20 07:10:28,806 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 07:10:28,807 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 07:10:28,807 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 07:10:28,807 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 07:10:28,816 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-11-20 07:10:28,816 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 07:10:28,817 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 07:10:28,818 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 07:10:28,818 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 07:10:28,819 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 07:10:28,819 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 07:10:28,842 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-11-20 07:10:28,842 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2021-11-20 07:10:28,843 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2021-11-20 07:10:28,843 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == systemActive) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive)) || ((((((tmp == 1 && pumpRunning == 0) && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) [2021-11-20 07:10:28,843 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) [2021-11-20 07:10:28,844 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2021-11-20 07:10:28,845 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) [2021-11-20 07:10:28,845 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && pumpRunning == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((tmp == 1 && pumpRunning == 0) && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1) [2021-11-20 07:10:28,846 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) [2021-11-20 07:10:28,846 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) [2021-11-20 07:10:28,846 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) || (1 <= \result && pumpRunning == 0)) [2021-11-20 07:10:28,847 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) [2021-11-20 07:10:28,847 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2021-11-20 07:10:28,847 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) [2021-11-20 07:10:28,847 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0) [2021-11-20 07:10:28,876 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 07:10:28,876 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 07:10:28,877 INFO L158 Benchmark]: Toolchain (without parser) took 11586.20ms. Allocated memory was 92.3MB in the beginning and 163.6MB in the end (delta: 71.3MB). Free memory was 69.9MB in the beginning and 64.5MB in the end (delta: 5.4MB). Peak memory consumption was 75.6MB. Max. memory is 16.1GB. [2021-11-20 07:10:28,877 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 92.3MB. Free memory was 68.1MB in the beginning and 68.1MB in the end (delta: 44.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 07:10:28,878 INFO L158 Benchmark]: CACSL2BoogieTranslator took 451.79ms. Allocated memory is still 92.3MB. Free memory was 69.7MB in the beginning and 50.8MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-20 07:10:28,878 INFO L158 Benchmark]: Boogie Procedure Inliner took 91.23ms. Allocated memory is still 92.3MB. Free memory was 50.6MB in the beginning and 48.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 07:10:28,879 INFO L158 Benchmark]: Boogie Preprocessor took 59.02ms. Allocated memory is still 92.3MB. Free memory was 48.1MB in the beginning and 46.5MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 07:10:28,879 INFO L158 Benchmark]: RCFGBuilder took 627.86ms. Allocated memory was 92.3MB in the beginning and 111.1MB in the end (delta: 18.9MB). Free memory was 46.5MB in the beginning and 82.3MB in the end (delta: -35.8MB). Peak memory consumption was 18.8MB. Max. memory is 16.1GB. [2021-11-20 07:10:28,879 INFO L158 Benchmark]: TraceAbstraction took 10269.86ms. Allocated memory was 111.1MB in the beginning and 163.6MB in the end (delta: 52.4MB). Free memory was 81.7MB in the beginning and 70.8MB in the end (delta: 10.9MB). Peak memory consumption was 89.4MB. Max. memory is 16.1GB. [2021-11-20 07:10:28,880 INFO L158 Benchmark]: Witness Printer took 79.84ms. Allocated memory is still 163.6MB. Free memory was 70.8MB in the beginning and 64.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-20 07:10:28,882 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 92.3MB. Free memory was 68.1MB in the beginning and 68.1MB in the end (delta: 44.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 451.79ms. Allocated memory is still 92.3MB. Free memory was 69.7MB in the beginning and 50.8MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 91.23ms. Allocated memory is still 92.3MB. Free memory was 50.6MB in the beginning and 48.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 59.02ms. Allocated memory is still 92.3MB. Free memory was 48.1MB in the beginning and 46.5MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 627.86ms. Allocated memory was 92.3MB in the beginning and 111.1MB in the end (delta: 18.9MB). Free memory was 46.5MB in the beginning and 82.3MB in the end (delta: -35.8MB). Peak memory consumption was 18.8MB. Max. memory is 16.1GB. * TraceAbstraction took 10269.86ms. Allocated memory was 111.1MB in the beginning and 163.6MB in the end (delta: 52.4MB). Free memory was 81.7MB in the beginning and 70.8MB in the end (delta: 10.9MB). Peak memory consumption was 89.4MB. Max. memory is 16.1GB. * Witness Printer took 79.84ms. Allocated memory is still 163.6MB. Free memory was 70.8MB in the beginning and 64.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 627]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 95 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.2s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1301 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1282 mSDsluCounter, 3815 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2421 mSDsCounter, 294 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 728 IncrementalHoareTripleChecker+Invalid, 1022 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 294 mSolverCounterUnsat, 1394 mSDtfsCounter, 728 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 525 GetRequests, 447 SyntacticMatches, 0 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1063occurred in iteration=8, InterpolantAutomatonStates: 64, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 288 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1976 PreInvPairs, 2085 NumberOfFragments, 1942 HoareAnnotationTreeSize, 1976 FomulaSimplifications, 192 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 43 FomulaSimplificationsInter, 5540 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 1011 NumberOfCodeBlocks, 1011 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 995 ConstructedInterpolants, 0 QuantifiedInterpolants, 1579 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1848 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 240/248 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == systemActive) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive)) || ((((((tmp == 1 && pumpRunning == 0) && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: (((((tmp == 1 && pumpRunning == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((tmp == 1 && pumpRunning == 0) && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 412]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 581]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 588]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 245]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2021-11-20 07:10:28,944 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d933e55-6169-4a2b-b2b2-91abd683a28d/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE