./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 06:09:35,747 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 06:09:35,749 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 06:09:35,779 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 06:09:35,780 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 06:09:35,781 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 06:09:35,783 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 06:09:35,785 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 06:09:35,788 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 06:09:35,792 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 06:09:35,793 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 06:09:35,796 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 06:09:35,797 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 06:09:35,802 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 06:09:35,804 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 06:09:35,807 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 06:09:35,809 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 06:09:35,811 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 06:09:35,814 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 06:09:35,822 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 06:09:35,824 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 06:09:35,826 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 06:09:35,829 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 06:09:35,830 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 06:09:35,839 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 06:09:35,839 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 06:09:35,840 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 06:09:35,842 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 06:09:35,842 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 06:09:35,844 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 06:09:35,844 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 06:09:35,845 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 06:09:35,847 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 06:09:35,848 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 06:09:35,850 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 06:09:35,850 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 06:09:35,851 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 06:09:35,851 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 06:09:35,851 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 06:09:35,852 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 06:09:35,853 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 06:09:35,854 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 06:09:35,898 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 06:09:35,898 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 06:09:35,899 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 06:09:35,899 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 06:09:35,900 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 06:09:35,900 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 06:09:35,901 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 06:09:35,902 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 06:09:35,902 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 06:09:35,902 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 06:09:35,903 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 06:09:35,903 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 06:09:35,904 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 06:09:35,904 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 06:09:35,904 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 06:09:35,904 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 06:09:35,905 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 06:09:35,905 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 06:09:35,905 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 06:09:35,905 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 06:09:35,905 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 06:09:35,906 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 06:09:35,906 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 06:09:35,906 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 06:09:35,906 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:09:35,907 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 06:09:35,907 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 06:09:35,907 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 06:09:35,907 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 06:09:35,909 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 06:09:35,910 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 06:09:35,910 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 06:09:35,910 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 06:09:35,910 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 06:09:35,911 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d [2021-11-20 06:09:36,227 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 06:09:36,253 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 06:09:36,256 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 06:09:36,257 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 06:09:36,258 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 06:09:36,260 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2021-11-20 06:09:36,331 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/data/f3123a302/65bc68cf47014ee594cb1ba204504017/FLAG2f82de6cb [2021-11-20 06:09:36,907 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 06:09:36,908 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2021-11-20 06:09:36,927 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/data/f3123a302/65bc68cf47014ee594cb1ba204504017/FLAG2f82de6cb [2021-11-20 06:09:37,218 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/data/f3123a302/65bc68cf47014ee594cb1ba204504017 [2021-11-20 06:09:37,220 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 06:09:37,222 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 06:09:37,241 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 06:09:37,241 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 06:09:37,245 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 06:09:37,246 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,247 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1ca1ada4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37, skipping insertion in model container [2021-11-20 06:09:37,249 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,256 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 06:09:37,318 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:09:37,564 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2021-11-20 06:09:37,612 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:09:37,620 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 06:09:37,697 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2021-11-20 06:09:37,726 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:09:37,753 INFO L208 MainTranslator]: Completed translation [2021-11-20 06:09:37,753 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37 WrapperNode [2021-11-20 06:09:37,754 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 06:09:37,755 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 06:09:37,755 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 06:09:37,755 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 06:09:37,763 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,788 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,838 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 283 [2021-11-20 06:09:37,840 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 06:09:37,841 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 06:09:37,841 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 06:09:37,841 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 06:09:37,849 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,850 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,863 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,870 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,877 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,901 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,904 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,911 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 06:09:37,913 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 06:09:37,914 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 06:09:37,914 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 06:09:37,915 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (1/1) ... [2021-11-20 06:09:37,922 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:09:37,939 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:09:37,954 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 06:09:37,978 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 06:09:38,001 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 06:09:38,002 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 06:09:38,002 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 06:09:38,002 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 06:09:38,002 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 06:09:38,003 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 06:09:38,003 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 06:09:38,003 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 06:09:38,003 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 06:09:38,004 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 06:09:38,004 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 06:09:38,004 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 06:09:38,005 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 06:09:38,005 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 06:09:38,005 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 06:09:38,005 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 06:09:38,107 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 06:09:38,109 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 06:09:38,481 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 06:09:38,489 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 06:09:38,489 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 06:09:38,491 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:09:38 BoogieIcfgContainer [2021-11-20 06:09:38,492 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 06:09:38,494 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 06:09:38,494 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 06:09:38,499 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 06:09:38,499 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 06:09:37" (1/3) ... [2021-11-20 06:09:38,500 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7fc37446 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:09:38, skipping insertion in model container [2021-11-20 06:09:38,500 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:09:37" (2/3) ... [2021-11-20 06:09:38,501 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7fc37446 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:09:38, skipping insertion in model container [2021-11-20 06:09:38,501 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:09:38" (3/3) ... [2021-11-20 06:09:38,502 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product58.cil.c [2021-11-20 06:09:38,508 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 06:09:38,508 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 06:09:38,582 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 06:09:38,588 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 06:09:38,589 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 06:09:38,617 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2021-11-20 06:09:38,623 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-11-20 06:09:38,623 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:38,624 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:38,625 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:38,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:38,630 INFO L85 PathProgramCache]: Analyzing trace with hash -644164364, now seen corresponding path program 1 times [2021-11-20 06:09:38,639 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:38,639 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1804309139] [2021-11-20 06:09:38,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:38,640 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:38,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:38,822 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:38,822 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:38,823 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1804309139] [2021-11-20 06:09:38,823 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1804309139] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:38,824 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:38,824 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 06:09:38,826 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1597099234] [2021-11-20 06:09:38,826 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:38,831 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 06:09:38,831 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:38,857 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 06:09:38,858 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 06:09:38,861 INFO L87 Difference]: Start difference. First operand has 87 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 06:09:38,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:38,894 INFO L93 Difference]: Finished difference Result 166 states and 227 transitions. [2021-11-20 06:09:38,895 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 06:09:38,896 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-11-20 06:09:38,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:38,906 INFO L225 Difference]: With dead ends: 166 [2021-11-20 06:09:38,907 INFO L226 Difference]: Without dead ends: 78 [2021-11-20 06:09:38,911 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 06:09:38,914 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:38,916 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:09:38,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2021-11-20 06:09:38,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2021-11-20 06:09:38,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-20 06:09:38,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 101 transitions. [2021-11-20 06:09:38,962 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 101 transitions. Word has length 19 [2021-11-20 06:09:38,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:38,963 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 101 transitions. [2021-11-20 06:09:38,963 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 06:09:38,963 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 101 transitions. [2021-11-20 06:09:38,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2021-11-20 06:09:38,965 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:38,966 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:38,966 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 06:09:38,966 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:38,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:38,967 INFO L85 PathProgramCache]: Analyzing trace with hash -1321297108, now seen corresponding path program 1 times [2021-11-20 06:09:38,967 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:38,967 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1233434824] [2021-11-20 06:09:38,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:38,968 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:39,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:39,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:39,093 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:39,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1233434824] [2021-11-20 06:09:39,094 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1233434824] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:39,094 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:39,095 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 06:09:39,095 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [556396809] [2021-11-20 06:09:39,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:39,098 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:09:39,098 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:39,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:09:39,101 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:09:39,101 INFO L87 Difference]: Start difference. First operand 78 states and 101 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 06:09:39,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:39,128 INFO L93 Difference]: Finished difference Result 121 states and 157 transitions. [2021-11-20 06:09:39,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:09:39,129 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2021-11-20 06:09:39,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:39,131 INFO L225 Difference]: With dead ends: 121 [2021-11-20 06:09:39,131 INFO L226 Difference]: Without dead ends: 69 [2021-11-20 06:09:39,132 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:09:39,134 INFO L933 BasicCegarLoop]: 88 mSDtfsCounter, 13 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:39,137 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 159 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:09:39,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2021-11-20 06:09:39,146 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2021-11-20 06:09:39,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 56 states have (on average 1.3392857142857142) internal successors, (75), 63 states have internal predecessors, (75), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-11-20 06:09:39,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 89 transitions. [2021-11-20 06:09:39,148 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 89 transitions. Word has length 20 [2021-11-20 06:09:39,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:39,148 INFO L470 AbstractCegarLoop]: Abstraction has 69 states and 89 transitions. [2021-11-20 06:09:39,148 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 06:09:39,148 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 89 transitions. [2021-11-20 06:09:39,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-11-20 06:09:39,158 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:39,158 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:39,158 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 06:09:39,159 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:39,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:39,160 INFO L85 PathProgramCache]: Analyzing trace with hash 2055869510, now seen corresponding path program 1 times [2021-11-20 06:09:39,160 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:39,160 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1535301757] [2021-11-20 06:09:39,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:39,161 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:39,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:39,235 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:39,235 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:39,236 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1535301757] [2021-11-20 06:09:39,236 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1535301757] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:39,236 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:39,236 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 06:09:39,237 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1631587159] [2021-11-20 06:09:39,237 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:39,237 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:09:39,239 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:39,240 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:09:39,240 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:09:39,240 INFO L87 Difference]: Start difference. First operand 69 states and 89 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 06:09:39,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:39,265 INFO L93 Difference]: Finished difference Result 131 states and 172 transitions. [2021-11-20 06:09:39,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:09:39,266 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2021-11-20 06:09:39,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:39,271 INFO L225 Difference]: With dead ends: 131 [2021-11-20 06:09:39,271 INFO L226 Difference]: Without dead ends: 69 [2021-11-20 06:09:39,273 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:09:39,279 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 69 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:39,281 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 87 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:09:39,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2021-11-20 06:09:39,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2021-11-20 06:09:39,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-11-20 06:09:39,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 88 transitions. [2021-11-20 06:09:39,303 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 88 transitions. Word has length 25 [2021-11-20 06:09:39,303 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:39,303 INFO L470 AbstractCegarLoop]: Abstraction has 69 states and 88 transitions. [2021-11-20 06:09:39,304 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 06:09:39,304 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 88 transitions. [2021-11-20 06:09:39,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-20 06:09:39,311 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:39,311 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:39,312 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 06:09:39,312 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:39,313 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:39,313 INFO L85 PathProgramCache]: Analyzing trace with hash 86695610, now seen corresponding path program 1 times [2021-11-20 06:09:39,313 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:39,314 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1898885774] [2021-11-20 06:09:39,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:39,314 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:39,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:39,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:09:39,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:39,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:39,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:39,405 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:39,405 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:39,405 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1898885774] [2021-11-20 06:09:39,406 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1898885774] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:39,406 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:39,406 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 06:09:39,406 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [854491108] [2021-11-20 06:09:39,407 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:39,407 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:09:39,407 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:39,408 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:09:39,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:09:39,408 INFO L87 Difference]: Start difference. First operand 69 states and 88 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 06:09:39,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:39,687 INFO L93 Difference]: Finished difference Result 195 states and 249 transitions. [2021-11-20 06:09:39,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:09:39,688 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2021-11-20 06:09:39,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:39,690 INFO L225 Difference]: With dead ends: 195 [2021-11-20 06:09:39,690 INFO L226 Difference]: Without dead ends: 133 [2021-11-20 06:09:39,692 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:09:39,693 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 159 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 102 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:39,693 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [161 Valid, 255 Invalid, 102 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 06:09:39,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2021-11-20 06:09:39,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 127. [2021-11-20 06:09:39,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 103 states have (on average 1.2718446601941749) internal successors, (131), 111 states have internal predecessors, (131), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2021-11-20 06:09:39,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 156 transitions. [2021-11-20 06:09:39,743 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 156 transitions. Word has length 35 [2021-11-20 06:09:39,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:39,743 INFO L470 AbstractCegarLoop]: Abstraction has 127 states and 156 transitions. [2021-11-20 06:09:39,743 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 06:09:39,743 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 156 transitions. [2021-11-20 06:09:39,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-11-20 06:09:39,745 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:39,745 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:39,745 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 06:09:39,745 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:39,746 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:39,746 INFO L85 PathProgramCache]: Analyzing trace with hash 585874736, now seen corresponding path program 1 times [2021-11-20 06:09:39,746 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:39,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [349733264] [2021-11-20 06:09:39,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:39,747 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:39,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:39,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:09:39,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:39,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:09:39,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:39,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:39,905 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:39,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [349733264] [2021-11-20 06:09:39,906 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [349733264] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:39,906 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:39,906 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:09:39,906 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367924774] [2021-11-20 06:09:39,907 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:39,907 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:09:39,907 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:39,908 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:09:39,908 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:09:39,908 INFO L87 Difference]: Start difference. First operand 127 states and 156 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 06:09:40,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:40,197 INFO L93 Difference]: Finished difference Result 376 states and 485 transitions. [2021-11-20 06:09:40,198 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-20 06:09:40,198 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2021-11-20 06:09:40,198 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:40,201 INFO L225 Difference]: With dead ends: 376 [2021-11-20 06:09:40,202 INFO L226 Difference]: Without dead ends: 256 [2021-11-20 06:09:40,204 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2021-11-20 06:09:40,205 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 203 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 206 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:40,206 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [206 Valid, 349 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 06:09:40,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2021-11-20 06:09:40,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 208. [2021-11-20 06:09:40,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 208 states, 169 states have (on average 1.272189349112426) internal successors, (215), 180 states have internal predecessors, (215), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2021-11-20 06:09:40,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 261 transitions. [2021-11-20 06:09:40,237 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 261 transitions. Word has length 41 [2021-11-20 06:09:40,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:40,237 INFO L470 AbstractCegarLoop]: Abstraction has 208 states and 261 transitions. [2021-11-20 06:09:40,238 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 06:09:40,238 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 261 transitions. [2021-11-20 06:09:40,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-11-20 06:09:40,239 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:40,239 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:40,240 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 06:09:40,240 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:40,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:40,241 INFO L85 PathProgramCache]: Analyzing trace with hash -1714947854, now seen corresponding path program 1 times [2021-11-20 06:09:40,241 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:40,241 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [744304470] [2021-11-20 06:09:40,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:40,241 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:40,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:40,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:09:40,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:40,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:09:40,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:40,361 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:40,361 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:40,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [744304470] [2021-11-20 06:09:40,362 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [744304470] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:40,362 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:40,362 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:09:40,362 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677839660] [2021-11-20 06:09:40,362 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:40,363 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:09:40,363 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:40,364 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:09:40,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:09:40,364 INFO L87 Difference]: Start difference. First operand 208 states and 261 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 06:09:40,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:40,541 INFO L93 Difference]: Finished difference Result 407 states and 514 transitions. [2021-11-20 06:09:40,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 06:09:40,542 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2021-11-20 06:09:40,544 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:40,548 INFO L225 Difference]: With dead ends: 407 [2021-11-20 06:09:40,549 INFO L226 Difference]: Without dead ends: 206 [2021-11-20 06:09:40,550 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-11-20 06:09:40,557 INFO L933 BasicCegarLoop]: 74 mSDtfsCounter, 133 mSDsluCounter, 229 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 303 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:40,562 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [136 Valid, 303 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:09:40,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2021-11-20 06:09:40,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 204. [2021-11-20 06:09:40,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 165 states have (on average 1.2545454545454546) internal successors, (207), 176 states have internal predecessors, (207), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2021-11-20 06:09:40,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 253 transitions. [2021-11-20 06:09:40,603 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 253 transitions. Word has length 41 [2021-11-20 06:09:40,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:40,603 INFO L470 AbstractCegarLoop]: Abstraction has 204 states and 253 transitions. [2021-11-20 06:09:40,604 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 06:09:40,604 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 253 transitions. [2021-11-20 06:09:40,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-11-20 06:09:40,606 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:40,606 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:40,606 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 06:09:40,606 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:40,607 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:40,607 INFO L85 PathProgramCache]: Analyzing trace with hash -318970168, now seen corresponding path program 1 times [2021-11-20 06:09:40,607 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:40,608 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [996441372] [2021-11-20 06:09:40,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:40,608 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:40,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:40,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:09:40,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:40,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:09:40,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:40,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:09:40,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:40,680 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:40,680 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:40,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [996441372] [2021-11-20 06:09:40,680 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [996441372] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:40,681 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:40,681 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:09:40,681 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [425588704] [2021-11-20 06:09:40,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:40,682 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:09:40,682 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:40,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:09:40,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:09:40,683 INFO L87 Difference]: Start difference. First operand 204 states and 253 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 06:09:40,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:40,980 INFO L93 Difference]: Finished difference Result 465 states and 577 transitions. [2021-11-20 06:09:40,980 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 06:09:40,980 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2021-11-20 06:09:40,981 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:40,983 INFO L225 Difference]: With dead ends: 465 [2021-11-20 06:09:40,983 INFO L226 Difference]: Without dead ends: 268 [2021-11-20 06:09:40,984 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-11-20 06:09:40,985 INFO L933 BasicCegarLoop]: 89 mSDtfsCounter, 156 mSDsluCounter, 264 mSDsCounter, 0 mSdLazyCounter, 181 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 353 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:40,985 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [156 Valid, 353 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 181 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 06:09:40,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 268 states. [2021-11-20 06:09:41,009 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 268 to 242. [2021-11-20 06:09:41,010 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.2424242424242424) internal successors, (246), 213 states have internal predecessors, (246), 19 states have call successors, (19), 18 states have call predecessors, (19), 24 states have return successors, (33), 19 states have call predecessors, (33), 19 states have call successors, (33) [2021-11-20 06:09:41,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 298 transitions. [2021-11-20 06:09:41,012 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 298 transitions. Word has length 45 [2021-11-20 06:09:41,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:41,013 INFO L470 AbstractCegarLoop]: Abstraction has 242 states and 298 transitions. [2021-11-20 06:09:41,013 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 06:09:41,013 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 298 transitions. [2021-11-20 06:09:41,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-11-20 06:09:41,014 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:41,015 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:41,015 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 06:09:41,015 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:41,015 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:41,016 INFO L85 PathProgramCache]: Analyzing trace with hash -1598724404, now seen corresponding path program 1 times [2021-11-20 06:09:41,016 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:41,016 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [590794113] [2021-11-20 06:09:41,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:41,016 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:41,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:41,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:09:41,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:41,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:09:41,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:41,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 06:09:41,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:41,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:41,145 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:41,146 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [590794113] [2021-11-20 06:09:41,146 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [590794113] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:41,146 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:41,146 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:09:41,146 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [173983827] [2021-11-20 06:09:41,147 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:41,147 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:09:41,148 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:41,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:09:41,149 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:09:41,150 INFO L87 Difference]: Start difference. First operand 242 states and 298 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 06:09:41,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:41,514 INFO L93 Difference]: Finished difference Result 266 states and 323 transitions. [2021-11-20 06:09:41,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-11-20 06:09:41,515 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 45 [2021-11-20 06:09:41,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:41,523 INFO L225 Difference]: With dead ends: 266 [2021-11-20 06:09:41,523 INFO L226 Difference]: Without dead ends: 264 [2021-11-20 06:09:41,524 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=274, Unknown=0, NotChecked=0, Total=380 [2021-11-20 06:09:41,525 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 190 mSDsluCounter, 320 mSDsCounter, 0 mSdLazyCounter, 229 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 268 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 229 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:41,525 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [191 Valid, 415 Invalid, 268 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 06:09:41,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264 states. [2021-11-20 06:09:41,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264 to 242. [2021-11-20 06:09:41,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.2272727272727273) internal successors, (243), 213 states have internal predecessors, (243), 19 states have call successors, (19), 18 states have call predecessors, (19), 24 states have return successors, (33), 19 states have call predecessors, (33), 19 states have call successors, (33) [2021-11-20 06:09:41,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 295 transitions. [2021-11-20 06:09:41,563 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 295 transitions. Word has length 45 [2021-11-20 06:09:41,563 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:41,563 INFO L470 AbstractCegarLoop]: Abstraction has 242 states and 295 transitions. [2021-11-20 06:09:41,564 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 06:09:41,564 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 295 transitions. [2021-11-20 06:09:41,565 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-20 06:09:41,565 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:41,566 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:41,566 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 06:09:41,566 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:41,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:41,567 INFO L85 PathProgramCache]: Analyzing trace with hash -1519506341, now seen corresponding path program 1 times [2021-11-20 06:09:41,567 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:41,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [203066809] [2021-11-20 06:09:41,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:41,567 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:41,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:41,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:09:41,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:41,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:09:41,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:41,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:41,654 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:41,654 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [203066809] [2021-11-20 06:09:41,654 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [203066809] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:41,654 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:41,655 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:09:41,655 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1964012029] [2021-11-20 06:09:41,655 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:41,656 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:09:41,656 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:41,657 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:09:41,657 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:09:41,657 INFO L87 Difference]: Start difference. First operand 242 states and 295 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 06:09:41,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:41,929 INFO L93 Difference]: Finished difference Result 473 states and 601 transitions. [2021-11-20 06:09:41,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-20 06:09:41,930 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2021-11-20 06:09:41,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:41,934 INFO L225 Difference]: With dead ends: 473 [2021-11-20 06:09:41,935 INFO L226 Difference]: Without dead ends: 316 [2021-11-20 06:09:41,936 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=119, Unknown=0, NotChecked=0, Total=182 [2021-11-20 06:09:41,939 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 171 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 268 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 472 SdHoareTripleChecker+Invalid, 306 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 268 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:41,939 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [172 Valid, 472 Invalid, 306 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 268 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 06:09:41,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2021-11-20 06:09:41,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 311. [2021-11-20 06:09:41,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 254 states have (on average 1.2244094488188977) internal successors, (311), 271 states have internal predecessors, (311), 26 states have call successors, (26), 25 states have call predecessors, (26), 30 states have return successors, (51), 27 states have call predecessors, (51), 26 states have call successors, (51) [2021-11-20 06:09:41,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 388 transitions. [2021-11-20 06:09:41,980 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 388 transitions. Word has length 47 [2021-11-20 06:09:41,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:41,980 INFO L470 AbstractCegarLoop]: Abstraction has 311 states and 388 transitions. [2021-11-20 06:09:41,981 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 06:09:41,981 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 388 transitions. [2021-11-20 06:09:41,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-20 06:09:41,982 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:41,982 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:41,983 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 06:09:41,983 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:41,983 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:41,983 INFO L85 PathProgramCache]: Analyzing trace with hash 1292286815, now seen corresponding path program 1 times [2021-11-20 06:09:41,984 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:41,984 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [438267973] [2021-11-20 06:09:41,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:41,984 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:42,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:09:42,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:09:42,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,090 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:42,090 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:42,091 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [438267973] [2021-11-20 06:09:42,091 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [438267973] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:42,091 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:42,091 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:09:42,091 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1891306605] [2021-11-20 06:09:42,092 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:42,092 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:09:42,092 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:42,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:09:42,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:09:42,093 INFO L87 Difference]: Start difference. First operand 311 states and 388 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 06:09:42,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:42,281 INFO L93 Difference]: Finished difference Result 623 states and 787 transitions. [2021-11-20 06:09:42,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 06:09:42,282 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2021-11-20 06:09:42,283 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:42,288 INFO L225 Difference]: With dead ends: 623 [2021-11-20 06:09:42,288 INFO L226 Difference]: Without dead ends: 319 [2021-11-20 06:09:42,289 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2021-11-20 06:09:42,291 INFO L933 BasicCegarLoop]: 83 mSDtfsCounter, 134 mSDsluCounter, 274 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 357 SdHoareTripleChecker+Invalid, 194 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:42,292 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [134 Valid, 357 Invalid, 194 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:09:42,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 319 states. [2021-11-20 06:09:42,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 319 to 311. [2021-11-20 06:09:42,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 254 states have (on average 1.2165354330708662) internal successors, (309), 271 states have internal predecessors, (309), 26 states have call successors, (26), 25 states have call predecessors, (26), 30 states have return successors, (51), 27 states have call predecessors, (51), 26 states have call successors, (51) [2021-11-20 06:09:42,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 386 transitions. [2021-11-20 06:09:42,327 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 386 transitions. Word has length 47 [2021-11-20 06:09:42,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:42,328 INFO L470 AbstractCegarLoop]: Abstraction has 311 states and 386 transitions. [2021-11-20 06:09:42,328 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 06:09:42,329 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 386 transitions. [2021-11-20 06:09:42,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-20 06:09:42,332 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:42,332 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:42,333 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-11-20 06:09:42,333 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:42,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:42,333 INFO L85 PathProgramCache]: Analyzing trace with hash -701857891, now seen corresponding path program 1 times [2021-11-20 06:09:42,334 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:42,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1876417820] [2021-11-20 06:09:42,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:42,334 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:42,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:09:42,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 06:09:42,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,419 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:42,419 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:42,419 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1876417820] [2021-11-20 06:09:42,419 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1876417820] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:42,420 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:42,420 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 06:09:42,420 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1538735136] [2021-11-20 06:09:42,420 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:42,420 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 06:09:42,421 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:42,421 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 06:09:42,421 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:09:42,422 INFO L87 Difference]: Start difference. First operand 311 states and 386 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 06:09:42,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:42,588 INFO L93 Difference]: Finished difference Result 561 states and 704 transitions. [2021-11-20 06:09:42,589 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 06:09:42,589 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2021-11-20 06:09:42,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:42,591 INFO L225 Difference]: With dead ends: 561 [2021-11-20 06:09:42,591 INFO L226 Difference]: Without dead ends: 257 [2021-11-20 06:09:42,593 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-11-20 06:09:42,594 INFO L933 BasicCegarLoop]: 81 mSDtfsCounter, 217 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 220 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 170 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:42,594 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [220 Valid, 283 Invalid, 170 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:09:42,595 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257 states. [2021-11-20 06:09:42,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257 to 255. [2021-11-20 06:09:42,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 206 states have (on average 1.2087378640776698) internal successors, (249), 219 states have internal predecessors, (249), 23 states have call successors, (23), 22 states have call predecessors, (23), 25 states have return successors, (40), 23 states have call predecessors, (40), 23 states have call successors, (40) [2021-11-20 06:09:42,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 312 transitions. [2021-11-20 06:09:42,616 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 312 transitions. Word has length 47 [2021-11-20 06:09:42,617 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:42,617 INFO L470 AbstractCegarLoop]: Abstraction has 255 states and 312 transitions. [2021-11-20 06:09:42,617 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 06:09:42,618 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 312 transitions. [2021-11-20 06:09:42,619 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2021-11-20 06:09:42,620 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:42,620 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:42,620 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-20 06:09:42,620 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:42,621 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:42,621 INFO L85 PathProgramCache]: Analyzing trace with hash 2145897221, now seen corresponding path program 1 times [2021-11-20 06:09:42,621 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:42,621 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97057567] [2021-11-20 06:09:42,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:42,622 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:42,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:09:42,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:09:42,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:09:42,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:09:42,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:42,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,745 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 12 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-20 06:09:42,746 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:42,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [97057567] [2021-11-20 06:09:42,746 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [97057567] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:09:42,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1380574513] [2021-11-20 06:09:42,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:42,747 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:09:42,747 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:09:42,748 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:09:42,759 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 06:09:42,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:42,860 INFO L263 TraceCheckSpWp]: Trace formula consists of 448 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 06:09:42,868 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:09:43,159 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 06:09:43,159 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:09:43,404 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-11-20 06:09:43,407 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1380574513] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:09:43,407 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 06:09:43,408 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2021-11-20 06:09:43,408 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1495909405] [2021-11-20 06:09:43,408 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 06:09:43,409 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-20 06:09:43,409 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:43,410 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-20 06:09:43,410 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:09:43,410 INFO L87 Difference]: Start difference. First operand 255 states and 312 transitions. Second operand has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-20 06:09:43,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:43,843 INFO L93 Difference]: Finished difference Result 590 states and 758 transitions. [2021-11-20 06:09:43,844 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2021-11-20 06:09:43,844 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 82 [2021-11-20 06:09:43,844 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:43,847 INFO L225 Difference]: With dead ends: 590 [2021-11-20 06:09:43,847 INFO L226 Difference]: Without dead ends: 383 [2021-11-20 06:09:43,849 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 175 SyntacticMatches, 3 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2021-11-20 06:09:43,849 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 242 mSDsluCounter, 445 mSDsCounter, 0 mSdLazyCounter, 359 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 564 SdHoareTripleChecker+Invalid, 424 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 359 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:43,850 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [246 Valid, 564 Invalid, 424 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 359 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 06:09:43,851 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 383 states. [2021-11-20 06:09:43,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 383 to 350. [2021-11-20 06:09:43,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 350 states, 280 states have (on average 1.2107142857142856) internal successors, (339), 298 states have internal predecessors, (339), 33 states have call successors, (33), 32 states have call predecessors, (33), 36 states have return successors, (60), 31 states have call predecessors, (60), 33 states have call successors, (60) [2021-11-20 06:09:43,877 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 350 states to 350 states and 432 transitions. [2021-11-20 06:09:43,877 INFO L78 Accepts]: Start accepts. Automaton has 350 states and 432 transitions. Word has length 82 [2021-11-20 06:09:43,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:43,878 INFO L470 AbstractCegarLoop]: Abstraction has 350 states and 432 transitions. [2021-11-20 06:09:43,878 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-20 06:09:43,878 INFO L276 IsEmpty]: Start isEmpty. Operand 350 states and 432 transitions. [2021-11-20 06:09:43,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-11-20 06:09:43,880 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:43,881 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:43,913 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 06:09:44,094 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-20 06:09:44,095 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:44,095 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:44,095 INFO L85 PathProgramCache]: Analyzing trace with hash 1100274715, now seen corresponding path program 2 times [2021-11-20 06:09:44,095 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:44,096 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [113363543] [2021-11-20 06:09:44,096 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:44,096 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:44,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:44,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:09:44,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:44,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:09:44,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:44,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:09:44,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:44,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-11-20 06:09:44,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:44,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 06:09:44,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:44,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:44,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:44,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-20 06:09:44,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:44,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:44,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:44,290 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 54 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-20 06:09:44,290 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:44,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [113363543] [2021-11-20 06:09:44,290 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [113363543] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:09:44,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1267612992] [2021-11-20 06:09:44,291 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-20 06:09:44,291 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:09:44,291 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:09:44,293 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:09:44,322 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 06:09:44,423 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-11-20 06:09:44,423 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-20 06:09:44,425 INFO L263 TraceCheckSpWp]: Trace formula consists of 537 conjuncts, 10 conjunts are in the unsatisfiable core [2021-11-20 06:09:44,434 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:09:44,708 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-11-20 06:09:44,708 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 06:09:44,709 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1267612992] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:44,709 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:09:44,709 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2021-11-20 06:09:44,709 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2139964880] [2021-11-20 06:09:44,710 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:44,710 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:09:44,710 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:44,711 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:09:44,711 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2021-11-20 06:09:44,711 INFO L87 Difference]: Start difference. First operand 350 states and 432 transitions. Second operand has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2021-11-20 06:09:44,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:44,955 INFO L93 Difference]: Finished difference Result 931 states and 1192 transitions. [2021-11-20 06:09:44,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-20 06:09:44,956 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 117 [2021-11-20 06:09:44,956 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:44,961 INFO L225 Difference]: With dead ends: 931 [2021-11-20 06:09:44,961 INFO L226 Difference]: Without dead ends: 628 [2021-11-20 06:09:44,963 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 130 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2021-11-20 06:09:44,963 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 242 mSDsluCounter, 336 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 476 SdHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:44,964 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [242 Valid, 476 Invalid, 142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:09:44,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 628 states. [2021-11-20 06:09:45,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 628 to 567. [2021-11-20 06:09:45,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 567 states, 454 states have (on average 1.2048458149779735) internal successors, (547), 479 states have internal predecessors, (547), 54 states have call successors, (54), 53 states have call predecessors, (54), 58 states have return successors, (95), 50 states have call predecessors, (95), 54 states have call successors, (95) [2021-11-20 06:09:45,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 567 states to 567 states and 696 transitions. [2021-11-20 06:09:45,030 INFO L78 Accepts]: Start accepts. Automaton has 567 states and 696 transitions. Word has length 117 [2021-11-20 06:09:45,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:45,031 INFO L470 AbstractCegarLoop]: Abstraction has 567 states and 696 transitions. [2021-11-20 06:09:45,031 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2021-11-20 06:09:45,031 INFO L276 IsEmpty]: Start isEmpty. Operand 567 states and 696 transitions. [2021-11-20 06:09:45,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-11-20 06:09:45,034 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:45,034 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:45,072 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 06:09:45,248 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-11-20 06:09:45,249 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:45,249 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:45,249 INFO L85 PathProgramCache]: Analyzing trace with hash 1976293721, now seen corresponding path program 1 times [2021-11-20 06:09:45,249 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:45,249 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809318860] [2021-11-20 06:09:45,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:45,250 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:45,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:45,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:09:45,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:45,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 06:09:45,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:45,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-11-20 06:09:45,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:45,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-11-20 06:09:45,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:45,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 06:09:45,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:45,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:45,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:45,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-20 06:09:45,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:45,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:45,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:45,344 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2021-11-20 06:09:45,344 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:45,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [809318860] [2021-11-20 06:09:45,344 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [809318860] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:09:45,345 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:09:45,345 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 06:09:45,347 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [62892169] [2021-11-20 06:09:45,347 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:09:45,348 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:09:45,348 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:45,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:09:45,348 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:09:45,349 INFO L87 Difference]: Start difference. First operand 567 states and 696 transitions. Second operand has 8 states, 8 states have (on average 10.25) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-20 06:09:45,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:45,506 INFO L93 Difference]: Finished difference Result 777 states and 943 transitions. [2021-11-20 06:09:45,506 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 06:09:45,506 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 117 [2021-11-20 06:09:45,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:45,507 INFO L225 Difference]: With dead ends: 777 [2021-11-20 06:09:45,507 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 06:09:45,509 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2021-11-20 06:09:45,510 INFO L933 BasicCegarLoop]: 76 mSDtfsCounter, 115 mSDsluCounter, 230 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 199 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:45,510 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [117 Valid, 306 Invalid, 199 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:09:45,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 06:09:45,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 06:09:45,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 06:09:45,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 06:09:45,512 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 117 [2021-11-20 06:09:45,512 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:45,512 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 06:09:45,512 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-20 06:09:45,513 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 06:09:45,513 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 06:09:45,515 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 06:09:45,516 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-11-20 06:09:45,518 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 06:09:47,425 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2021-11-20 06:09:47,426 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2021-11-20 06:09:47,426 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 487 498) the Hoare annotation is: true [2021-11-20 06:09:47,426 INFO L858 garLoopResultBuilder]: For program point L491-1(lines 487 498) no Hoare annotation was computed. [2021-11-20 06:09:47,426 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 487 498) no Hoare annotation was computed. [2021-11-20 06:09:47,426 INFO L854 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,426 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 707 730) no Hoare annotation was computed. [2021-11-20 06:09:47,426 INFO L858 garLoopResultBuilder]: For program point L449(line 449) no Hoare annotation was computed. [2021-11-20 06:09:47,427 INFO L854 garLoopResultBuilder]: At program point L536(lines 531 539) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (and (<= 2 ~waterLevel~0) .cse5 (<= 2 |timeShift_getWaterLevel_#res#1|)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4) (or .cse0 (and .cse2 .cse5) .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse3)))) [2021-11-20 06:09:47,427 INFO L854 garLoopResultBuilder]: At program point L821(lines 816 823) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,427 INFO L854 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,427 INFO L854 garLoopResultBuilder]: At program point L784-1(lines 765 789) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (<= 2 ~waterLevel~0) .cse3))) (and (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 .cse3) .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse2)))) [2021-11-20 06:09:47,427 INFO L858 garLoopResultBuilder]: For program point L718-1(lines 718 724) no Hoare annotation was computed. [2021-11-20 06:09:47,427 INFO L858 garLoopResultBuilder]: For program point L908(lines 908 912) no Hoare annotation was computed. [2021-11-20 06:09:47,428 INFO L858 garLoopResultBuilder]: For program point L908-2(lines 908 912) no Hoare annotation was computed. [2021-11-20 06:09:47,428 INFO L854 garLoopResultBuilder]: At program point L450(lines 445 452) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,428 INFO L858 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2021-11-20 06:09:47,428 INFO L854 garLoopResultBuilder]: At program point L467-2(lines 463 474) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,428 INFO L858 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2021-11-20 06:09:47,428 INFO L858 garLoopResultBuilder]: For program point L773(lines 773 781) no Hoare annotation was computed. [2021-11-20 06:09:47,428 INFO L858 garLoopResultBuilder]: For program point L769(lines 769 786) no Hoare annotation was computed. [2021-11-20 06:09:47,429 INFO L854 garLoopResultBuilder]: At program point L914(lines 899 917) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,429 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 707 730) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,429 INFO L854 garLoopResultBuilder]: At program point L559(lines 554 562) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,429 INFO L858 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2021-11-20 06:09:47,429 INFO L858 garLoopResultBuilder]: For program point L427(lines 427 440) no Hoare annotation was computed. [2021-11-20 06:09:47,429 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2021-11-20 06:09:47,429 INFO L854 garLoopResultBuilder]: At program point L427-1(lines 419 443) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (and (<= 2 ~waterLevel~0) .cse5 .cse4 (<= 2 |timeShift_getWaterLevel_#res#1|) (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse5))) (and (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse4) .cse2 (not (<= 1 |old(~waterLevel~0)|)) .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 1) (= |timeShift_getWaterLevel_#res#1| 1)))))) [2021-11-20 06:09:47,430 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 449) no Hoare annotation was computed. [2021-11-20 06:09:47,430 INFO L854 garLoopResultBuilder]: At program point L840(lines 835 843) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,430 INFO L858 garLoopResultBuilder]: For program point L577(line 577) no Hoare annotation was computed. [2021-11-20 06:09:47,430 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 566 595) no Hoare annotation was computed. [2021-11-20 06:09:47,430 INFO L861 garLoopResultBuilder]: At program point L576-2(lines 576 590) the Hoare annotation is: true [2021-11-20 06:09:47,430 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 566 595) the Hoare annotation is: true [2021-11-20 06:09:47,430 INFO L861 garLoopResultBuilder]: At program point L572(line 572) the Hoare annotation is: true [2021-11-20 06:09:47,431 INFO L858 garLoopResultBuilder]: For program point L572-1(line 572) no Hoare annotation was computed. [2021-11-20 06:09:47,431 INFO L861 garLoopResultBuilder]: At program point L591(lines 566 595) the Hoare annotation is: true [2021-11-20 06:09:47,431 INFO L858 garLoopResultBuilder]: For program point L587(line 587) no Hoare annotation was computed. [2021-11-20 06:09:47,431 INFO L858 garLoopResultBuilder]: For program point L580(lines 580 584) no Hoare annotation was computed. [2021-11-20 06:09:47,431 INFO L861 garLoopResultBuilder]: At program point L580-1(lines 580 584) the Hoare annotation is: true [2021-11-20 06:09:47,431 INFO L854 garLoopResultBuilder]: At program point L923(lines 918 925) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-11-20 06:09:47,431 INFO L854 garLoopResultBuilder]: At program point L985(lines 936 986) the Hoare annotation is: false [2021-11-20 06:09:47,431 INFO L854 garLoopResultBuilder]: At program point L696(lines 691 699) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 06:09:47,432 INFO L854 garLoopResultBuilder]: At program point L688(lines 684 690) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 06:09:47,432 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 06:09:47,432 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 06:09:47,432 INFO L858 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2021-11-20 06:09:47,432 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 06:09:47,432 INFO L858 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2021-11-20 06:09:47,436 INFO L854 garLoopResultBuilder]: At program point L982(lines 937 984) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-11-20 06:09:47,436 INFO L854 garLoopResultBuilder]: At program point L949(line 949) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-11-20 06:09:47,437 INFO L858 garLoopResultBuilder]: For program point L652(lines 652 659) no Hoare annotation was computed. [2021-11-20 06:09:47,437 INFO L858 garLoopResultBuilder]: For program point L652-2(lines 652 659) no Hoare annotation was computed. [2021-11-20 06:09:47,437 INFO L854 garLoopResultBuilder]: At program point L681(lines 677 683) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 06:09:47,437 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 06:09:47,437 INFO L861 garLoopResultBuilder]: At program point L636(lines 629 638) the Hoare annotation is: true [2021-11-20 06:09:47,437 INFO L861 garLoopResultBuilder]: At program point L661(lines 642 664) the Hoare annotation is: true [2021-11-20 06:09:47,438 INFO L858 garLoopResultBuilder]: For program point L975(lines 975 979) no Hoare annotation was computed. [2021-11-20 06:09:47,438 INFO L854 garLoopResultBuilder]: At program point L975-2(lines 967 980) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-11-20 06:09:47,438 INFO L858 garLoopResultBuilder]: For program point L938(lines 937 984) no Hoare annotation was computed. [2021-11-20 06:09:47,438 INFO L858 garLoopResultBuilder]: For program point L967(lines 967 980) no Hoare annotation was computed. [2021-11-20 06:09:47,438 INFO L854 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-11-20 06:09:47,438 INFO L861 garLoopResultBuilder]: At program point L988(lines 927 992) the Hoare annotation is: true [2021-11-20 06:09:47,439 INFO L858 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2021-11-20 06:09:47,440 INFO L858 garLoopResultBuilder]: For program point L947-1(lines 947 953) no Hoare annotation was computed. [2021-11-20 06:09:47,440 INFO L854 garLoopResultBuilder]: At program point L625(lines 621 627) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 06:09:47,440 INFO L858 garLoopResultBuilder]: For program point L939(lines 939 943) no Hoare annotation was computed. [2021-11-20 06:09:47,442 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 739 763) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))))) [2021-11-20 06:09:47,443 INFO L854 garLoopResultBuilder]: At program point L795(lines 790 797) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0)) [2021-11-20 06:09:47,443 INFO L854 garLoopResultBuilder]: At program point L504(lines 499 507) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) [2021-11-20 06:09:47,443 INFO L854 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2021-11-20 06:09:47,443 INFO L858 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2021-11-20 06:09:47,445 INFO L858 garLoopResultBuilder]: For program point L806(lines 806 812) no Hoare annotation was computed. [2021-11-20 06:09:47,445 INFO L854 garLoopResultBuilder]: At program point L806-2(lines 799 815) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0)) [2021-11-20 06:09:47,445 INFO L858 garLoopResultBuilder]: For program point L544(lines 544 550) no Hoare annotation was computed. [2021-11-20 06:09:47,445 INFO L854 garLoopResultBuilder]: At program point L895(lines 880 898) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse6)) (.cse2 (and .cse4 .cse5 .cse3 .cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) .cse2 (and .cse4 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))))) [2021-11-20 06:09:47,447 INFO L854 garLoopResultBuilder]: At program point L831(lines 824 834) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) [2021-11-20 06:09:47,447 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2021-11-20 06:09:47,447 INFO L858 garLoopResultBuilder]: For program point L889(lines 889 893) no Hoare annotation was computed. [2021-11-20 06:09:47,448 INFO L858 garLoopResultBuilder]: For program point L889-2(lines 889 893) no Hoare annotation was computed. [2021-11-20 06:09:47,448 INFO L854 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0))) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))))) [2021-11-20 06:09:47,448 INFO L858 garLoopResultBuilder]: For program point L747(lines 747 755) no Hoare annotation was computed. [2021-11-20 06:09:47,448 INFO L858 garLoopResultBuilder]: For program point L743(lines 743 760) no Hoare annotation was computed. [2021-11-20 06:09:47,448 INFO L854 garLoopResultBuilder]: At program point L549(lines 540 553) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (and .cse2 .cse3)) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and .cse2 (not .cse3))))) [2021-11-20 06:09:47,449 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 475 486) no Hoare annotation was computed. [2021-11-20 06:09:47,449 INFO L858 garLoopResultBuilder]: For program point L479-1(lines 475 486) no Hoare annotation was computed. [2021-11-20 06:09:47,449 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 475 486) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 06:09:47,453 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:47,454 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 06:09:47,491 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 06:09:47 BoogieIcfgContainer [2021-11-20 06:09:47,501 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 06:09:47,502 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 06:09:47,502 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 06:09:47,502 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 06:09:47,503 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:09:38" (3/4) ... [2021-11-20 06:09:47,506 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 06:09:47,511 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 06:09:47,511 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 06:09:47,511 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 06:09:47,511 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 06:09:47,512 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 06:09:47,512 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 06:09:47,520 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2021-11-20 06:09:47,521 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 06:09:47,522 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 06:09:47,522 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 06:09:47,523 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 06:09:47,524 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 06:09:47,524 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 06:09:47,549 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2021-11-20 06:09:47,550 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2021-11-20 06:09:47,550 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && (((!(1 == systemActive) || (((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) [2021-11-20 06:09:47,551 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) || !(1 == systemActive)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1)) [2021-11-20 06:09:47,551 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2021-11-20 06:09:47,551 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) [2021-11-20 06:09:47,552 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2021-11-20 06:09:47,552 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) [2021-11-20 06:09:47,552 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || !(2 <= waterLevel)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) [2021-11-20 06:09:47,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2021-11-20 06:09:47,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) [2021-11-20 06:09:47,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) [2021-11-20 06:09:47,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) [2021-11-20 06:09:47,554 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel [2021-11-20 06:09:47,554 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel [2021-11-20 06:09:47,582 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 06:09:47,583 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 06:09:47,583 INFO L158 Benchmark]: Toolchain (without parser) took 10361.62ms. Allocated memory was 92.3MB in the beginning and 134.2MB in the end (delta: 41.9MB). Free memory was 50.9MB in the beginning and 73.9MB in the end (delta: -23.0MB). Peak memory consumption was 19.8MB. Max. memory is 16.1GB. [2021-11-20 06:09:47,584 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 92.3MB. Free memory was 67.9MB in the beginning and 67.8MB in the end (delta: 47.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 06:09:47,584 INFO L158 Benchmark]: CACSL2BoogieTranslator took 512.87ms. Allocated memory is still 92.3MB. Free memory was 71.4MB in the beginning and 57.6MB in the end (delta: 13.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-11-20 06:09:47,588 INFO L158 Benchmark]: Boogie Procedure Inliner took 84.90ms. Allocated memory is still 92.3MB. Free memory was 57.6MB in the beginning and 54.8MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 06:09:47,589 INFO L158 Benchmark]: Boogie Preprocessor took 71.94ms. Allocated memory is still 92.3MB. Free memory was 54.8MB in the beginning and 53.2MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 06:09:47,590 INFO L158 Benchmark]: RCFGBuilder took 579.38ms. Allocated memory is still 92.3MB. Free memory was 53.2MB in the beginning and 36.6MB in the end (delta: 16.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-20 06:09:47,590 INFO L158 Benchmark]: TraceAbstraction took 9007.00ms. Allocated memory was 92.3MB in the beginning and 134.2MB in the end (delta: 41.9MB). Free memory was 36.1MB in the beginning and 81.3MB in the end (delta: -45.2MB). Peak memory consumption was 50.9MB. Max. memory is 16.1GB. [2021-11-20 06:09:47,591 INFO L158 Benchmark]: Witness Printer took 81.18ms. Allocated memory is still 134.2MB. Free memory was 81.3MB in the beginning and 73.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-20 06:09:47,595 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 92.3MB. Free memory was 67.9MB in the beginning and 67.8MB in the end (delta: 47.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 512.87ms. Allocated memory is still 92.3MB. Free memory was 71.4MB in the beginning and 57.6MB in the end (delta: 13.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 84.90ms. Allocated memory is still 92.3MB. Free memory was 57.6MB in the beginning and 54.8MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 71.94ms. Allocated memory is still 92.3MB. Free memory was 54.8MB in the beginning and 53.2MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 579.38ms. Allocated memory is still 92.3MB. Free memory was 53.2MB in the beginning and 36.6MB in the end (delta: 16.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 9007.00ms. Allocated memory was 92.3MB in the beginning and 134.2MB in the end (delta: 41.9MB). Free memory was 36.1MB in the beginning and 81.3MB in the end (delta: -45.2MB). Peak memory consumption was 50.9MB. Max. memory is 16.1GB. * Witness Printer took 81.18ms. Allocated memory is still 134.2MB. Free memory was 81.3MB in the beginning and 73.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 449]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.9s, OverallIterations: 14, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 3.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2066 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2044 mSDsluCounter, 4489 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3117 mSDsCounter, 379 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1921 IncrementalHoareTripleChecker+Invalid, 2300 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 379 mSolverCounterUnsat, 1372 mSDtfsCounter, 1921 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 527 GetRequests, 385 SyntacticMatches, 6 SemanticMatches, 136 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 294 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=567occurred in iteration=13, InterpolantAutomatonStates: 132, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 213 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 1337 PreInvPairs, 1426 NumberOfFragments, 1081 HoareAnnotationTreeSize, 1337 FomulaSimplifications, 1267 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 42 FomulaSimplificationsInter, 3735 FormulaSimplificationTreeSizeReductionInter, 1.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 927 NumberOfCodeBlocks, 927 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 992 ConstructedInterpolants, 0 QuantifiedInterpolants, 1903 SizeOfPredicates, 8 NumberOfNonLiveVariables, 985 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 17 InterpolantComputations, 13 PerfectInterpolantSequences, 264/294 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: (((((((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) || !(1 == systemActive)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1)) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 799]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel - InvariantResult [Line: 642]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 554]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || !(2 <= waterLevel)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && (((!(1 == systemActive) || (((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) - InvariantResult [Line: 621]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 445]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 499]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 629]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: (((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 824]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 566]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) - InvariantResult [Line: 684]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-11-20 06:09:47,697 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4e0bc675-17ca-46d3-96ca-9519b955c79d/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE