./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9cfe95aaca007f6467395901a9efc89e5ad27f0fc32ae7ae8a1fe4e27a1f35c1 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 07:00:35,789 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 07:00:35,791 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 07:00:35,821 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 07:00:35,822 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 07:00:35,823 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 07:00:35,825 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 07:00:35,828 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 07:00:35,830 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 07:00:35,831 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 07:00:35,833 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 07:00:35,834 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 07:00:35,835 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 07:00:35,836 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 07:00:35,838 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 07:00:35,840 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 07:00:35,841 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 07:00:35,842 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 07:00:35,845 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 07:00:35,847 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 07:00:35,849 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 07:00:35,851 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 07:00:35,853 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 07:00:35,854 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 07:00:35,857 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 07:00:35,858 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 07:00:35,858 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 07:00:35,860 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 07:00:35,860 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 07:00:35,861 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 07:00:35,862 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 07:00:35,863 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 07:00:35,864 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 07:00:35,865 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 07:00:35,866 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 07:00:35,866 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 07:00:35,867 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 07:00:35,868 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 07:00:35,868 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 07:00:35,869 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 07:00:35,870 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 07:00:35,871 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 07:00:35,896 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 07:00:35,897 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 07:00:35,897 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 07:00:35,897 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 07:00:35,898 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 07:00:35,899 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 07:00:35,900 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 07:00:35,900 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 07:00:35,901 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 07:00:35,901 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 07:00:35,901 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 07:00:35,902 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 07:00:35,902 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 07:00:35,903 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 07:00:35,903 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 07:00:35,903 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 07:00:35,904 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 07:00:35,904 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 07:00:35,904 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 07:00:35,905 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 07:00:35,905 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 07:00:35,906 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 07:00:35,906 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 07:00:35,906 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 07:00:35,907 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:00:35,907 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 07:00:35,908 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 07:00:35,908 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 07:00:35,908 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 07:00:35,908 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 07:00:35,909 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 07:00:35,909 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 07:00:35,909 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 07:00:35,909 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 07:00:35,910 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9cfe95aaca007f6467395901a9efc89e5ad27f0fc32ae7ae8a1fe4e27a1f35c1 [2021-11-20 07:00:36,154 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 07:00:36,181 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 07:00:36,183 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 07:00:36,185 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 07:00:36,186 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 07:00:36,188 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c [2021-11-20 07:00:36,268 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/data/38f2ee9ee/d13fa296a1064ab88e874a758e372679/FLAGf70c9dd64 [2021-11-20 07:00:36,802 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 07:00:36,805 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c [2021-11-20 07:00:36,830 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/data/38f2ee9ee/d13fa296a1064ab88e874a758e372679/FLAGf70c9dd64 [2021-11-20 07:00:37,121 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/data/38f2ee9ee/d13fa296a1064ab88e874a758e372679 [2021-11-20 07:00:37,124 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 07:00:37,126 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 07:00:37,129 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 07:00:37,129 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 07:00:37,133 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 07:00:37,134 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,135 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@76f2b99b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37, skipping insertion in model container [2021-11-20 07:00:37,136 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,143 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 07:00:37,225 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 07:00:37,453 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2021-11-20 07:00:37,663 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:00:37,684 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 07:00:37,708 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/sv-benchmarks/c/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2021-11-20 07:00:37,775 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:00:37,794 INFO L208 MainTranslator]: Completed translation [2021-11-20 07:00:37,794 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37 WrapperNode [2021-11-20 07:00:37,794 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 07:00:37,796 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 07:00:37,796 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 07:00:37,796 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 07:00:37,804 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,828 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,868 INFO L137 Inliner]: procedures = 58, calls = 158, calls flagged for inlining = 26, calls inlined = 22, statements flattened = 265 [2021-11-20 07:00:37,869 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 07:00:37,870 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 07:00:37,870 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 07:00:37,871 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 07:00:37,883 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,883 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,898 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,898 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,905 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,910 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,928 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,931 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 07:00:37,932 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 07:00:37,932 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 07:00:37,932 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 07:00:37,948 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (1/1) ... [2021-11-20 07:00:37,958 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:00:37,970 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:00:37,991 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 07:00:38,023 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 07:00:38,047 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 07:00:38,047 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 07:00:38,048 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 07:00:38,048 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 07:00:38,048 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 07:00:38,048 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 07:00:38,049 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 07:00:38,049 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 07:00:38,049 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 07:00:38,053 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 07:00:38,053 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 07:00:38,053 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-20 07:00:38,053 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-20 07:00:38,054 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 07:00:38,054 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 07:00:38,054 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 07:00:38,054 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 07:00:38,054 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 07:00:38,167 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 07:00:38,181 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 07:00:38,671 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 07:00:38,678 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 07:00:38,678 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 07:00:38,688 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:00:38 BoogieIcfgContainer [2021-11-20 07:00:38,688 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 07:00:38,689 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 07:00:38,690 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 07:00:38,697 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 07:00:38,697 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 07:00:37" (1/3) ... [2021-11-20 07:00:38,698 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@250a4a48 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:00:38, skipping insertion in model container [2021-11-20 07:00:38,698 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:00:37" (2/3) ... [2021-11-20 07:00:38,699 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@250a4a48 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:00:38, skipping insertion in model container [2021-11-20 07:00:38,699 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:00:38" (3/3) ... [2021-11-20 07:00:38,700 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product50.cil.c [2021-11-20 07:00:38,707 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 07:00:38,707 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 07:00:38,753 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 07:00:38,758 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 07:00:38,758 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 07:00:38,779 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-11-20 07:00:38,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-20 07:00:38,794 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:38,795 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:38,796 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:38,801 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:38,802 INFO L85 PathProgramCache]: Analyzing trace with hash 58300630, now seen corresponding path program 1 times [2021-11-20 07:00:38,811 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:38,813 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1599498639] [2021-11-20 07:00:38,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:38,814 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:39,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 07:00:39,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 07:00:39,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,153 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:00:39,154 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:39,155 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1599498639] [2021-11-20 07:00:39,156 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1599498639] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:39,157 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:39,157 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 07:00:39,159 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [220227438] [2021-11-20 07:00:39,160 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:39,164 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 07:00:39,165 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:39,191 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 07:00:39,191 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 07:00:39,194 INFO L87 Difference]: Start difference. First operand has 93 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 07:00:39,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:39,229 INFO L93 Difference]: Finished difference Result 177 states and 240 transitions. [2021-11-20 07:00:39,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 07:00:39,232 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-11-20 07:00:39,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:39,239 INFO L225 Difference]: With dead ends: 177 [2021-11-20 07:00:39,240 INFO L226 Difference]: Without dead ends: 84 [2021-11-20 07:00:39,244 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 07:00:39,247 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:39,249 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:00:39,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2021-11-20 07:00:39,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2021-11-20 07:00:39,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-11-20 07:00:39,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2021-11-20 07:00:39,296 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 32 [2021-11-20 07:00:39,297 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:39,297 INFO L470 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2021-11-20 07:00:39,297 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 07:00:39,297 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2021-11-20 07:00:39,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-11-20 07:00:39,300 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:39,301 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:39,301 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 07:00:39,301 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:39,302 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:39,302 INFO L85 PathProgramCache]: Analyzing trace with hash 1182453555, now seen corresponding path program 1 times [2021-11-20 07:00:39,302 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:39,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1857732059] [2021-11-20 07:00:39,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:39,303 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:39,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:00:39,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-20 07:00:39,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,374 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:00:39,374 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:39,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1857732059] [2021-11-20 07:00:39,375 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1857732059] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:39,375 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:39,375 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 07:00:39,376 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1039873141] [2021-11-20 07:00:39,376 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:39,377 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:00:39,378 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:39,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:00:39,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:39,379 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 07:00:39,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:39,397 INFO L93 Difference]: Finished difference Result 132 states and 170 transitions. [2021-11-20 07:00:39,398 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:00:39,398 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-11-20 07:00:39,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:39,400 INFO L225 Difference]: With dead ends: 132 [2021-11-20 07:00:39,400 INFO L226 Difference]: Without dead ends: 75 [2021-11-20 07:00:39,401 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:39,402 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 13 mSDsluCounter, 78 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:39,403 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 173 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:00:39,404 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2021-11-20 07:00:39,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2021-11-20 07:00:39,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-20 07:00:39,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2021-11-20 07:00:39,416 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 33 [2021-11-20 07:00:39,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:39,416 INFO L470 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2021-11-20 07:00:39,416 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 07:00:39,417 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2021-11-20 07:00:39,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-11-20 07:00:39,418 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:39,419 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:39,419 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 07:00:39,419 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:39,420 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:39,420 INFO L85 PathProgramCache]: Analyzing trace with hash 1082286122, now seen corresponding path program 1 times [2021-11-20 07:00:39,420 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:39,420 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [228155182] [2021-11-20 07:00:39,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:39,421 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:39,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:00:39,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 07:00:39,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,520 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:00:39,520 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:39,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [228155182] [2021-11-20 07:00:39,520 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [228155182] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:39,521 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:39,521 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 07:00:39,521 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [931924293] [2021-11-20 07:00:39,521 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:39,522 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:00:39,522 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:39,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:00:39,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:39,523 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:00:39,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:39,548 INFO L93 Difference]: Finished difference Result 142 states and 185 transitions. [2021-11-20 07:00:39,549 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:00:39,549 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-11-20 07:00:39,550 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:39,551 INFO L225 Difference]: With dead ends: 142 [2021-11-20 07:00:39,551 INFO L226 Difference]: Without dead ends: 75 [2021-11-20 07:00:39,552 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:00:39,554 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 86 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:39,555 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [86 Valid, 94 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:00:39,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2021-11-20 07:00:39,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2021-11-20 07:00:39,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-20 07:00:39,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 95 transitions. [2021-11-20 07:00:39,568 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 95 transitions. Word has length 38 [2021-11-20 07:00:39,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:39,569 INFO L470 AbstractCegarLoop]: Abstraction has 75 states and 95 transitions. [2021-11-20 07:00:39,570 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:00:39,570 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 95 transitions. [2021-11-20 07:00:39,572 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2021-11-20 07:00:39,572 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:39,572 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:39,572 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 07:00:39,573 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:39,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:39,573 INFO L85 PathProgramCache]: Analyzing trace with hash 605778703, now seen corresponding path program 1 times [2021-11-20 07:00:39,574 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:39,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1062558404] [2021-11-20 07:00:39,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:39,574 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:39,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:00:39,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-20 07:00:39,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:00:39,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-11-20 07:00:39,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:39,679 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:00:39,680 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:39,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1062558404] [2021-11-20 07:00:39,680 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1062558404] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:39,680 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:39,681 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:00:39,681 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107591638] [2021-11-20 07:00:39,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:39,682 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:00:39,682 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:39,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:00:39,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:00:39,683 INFO L87 Difference]: Start difference. First operand 75 states and 95 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-20 07:00:39,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:39,937 INFO L93 Difference]: Finished difference Result 221 states and 282 transitions. [2021-11-20 07:00:39,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:00:39,937 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 48 [2021-11-20 07:00:39,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:39,940 INFO L225 Difference]: With dead ends: 221 [2021-11-20 07:00:39,940 INFO L226 Difference]: Without dead ends: 154 [2021-11-20 07:00:39,941 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:00:39,943 INFO L933 BasicCegarLoop]: 135 mSDtfsCounter, 195 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 198 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:39,943 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [198 Valid, 321 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:00:39,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2021-11-20 07:00:39,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 148. [2021-11-20 07:00:39,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 115 states have (on average 1.2695652173913043) internal successors, (146), 122 states have internal predecessors, (146), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2021-11-20 07:00:39,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 183 transitions. [2021-11-20 07:00:39,989 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 183 transitions. Word has length 48 [2021-11-20 07:00:39,993 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:39,994 INFO L470 AbstractCegarLoop]: Abstraction has 148 states and 183 transitions. [2021-11-20 07:00:39,994 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-11-20 07:00:39,994 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 183 transitions. [2021-11-20 07:00:39,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-11-20 07:00:39,996 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:39,997 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:39,997 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 07:00:40,000 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:40,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:40,001 INFO L85 PathProgramCache]: Analyzing trace with hash 1075912719, now seen corresponding path program 1 times [2021-11-20 07:00:40,001 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:40,001 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [686564615] [2021-11-20 07:00:40,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:40,002 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:40,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:00:40,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-20 07:00:40,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 07:00:40,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,150 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:00:40,150 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:40,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [686564615] [2021-11-20 07:00:40,158 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [686564615] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:40,159 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:40,159 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 07:00:40,159 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2038883476] [2021-11-20 07:00:40,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:40,160 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:00:40,160 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:40,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:00:40,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:00:40,161 INFO L87 Difference]: Start difference. First operand 148 states and 183 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 07:00:40,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:40,318 INFO L93 Difference]: Finished difference Result 296 states and 370 transitions. [2021-11-20 07:00:40,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:00:40,318 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2021-11-20 07:00:40,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:40,325 INFO L225 Difference]: With dead ends: 296 [2021-11-20 07:00:40,325 INFO L226 Difference]: Without dead ends: 156 [2021-11-20 07:00:40,328 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:00:40,338 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 66 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:40,338 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 401 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:00:40,339 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2021-11-20 07:00:40,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 151. [2021-11-20 07:00:40,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 118 states have (on average 1.2627118644067796) internal successors, (149), 125 states have internal predecessors, (149), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2021-11-20 07:00:40,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 186 transitions. [2021-11-20 07:00:40,368 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 186 transitions. Word has length 52 [2021-11-20 07:00:40,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:40,369 INFO L470 AbstractCegarLoop]: Abstraction has 151 states and 186 transitions. [2021-11-20 07:00:40,369 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 07:00:40,369 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 186 transitions. [2021-11-20 07:00:40,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-11-20 07:00:40,375 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:40,375 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:40,375 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 07:00:40,376 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:40,376 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:40,376 INFO L85 PathProgramCache]: Analyzing trace with hash -613031023, now seen corresponding path program 1 times [2021-11-20 07:00:40,376 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:40,377 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901842771] [2021-11-20 07:00:40,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:40,377 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:40,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:00:40,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-20 07:00:40,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 07:00:40,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,509 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:00:40,509 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:40,510 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901842771] [2021-11-20 07:00:40,510 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901842771] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:40,510 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:40,510 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 07:00:40,510 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [815037315] [2021-11-20 07:00:40,510 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:40,511 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:00:40,511 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:40,511 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:00:40,512 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:00:40,513 INFO L87 Difference]: Start difference. First operand 151 states and 186 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-20 07:00:40,660 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:40,662 INFO L93 Difference]: Finished difference Result 307 states and 385 transitions. [2021-11-20 07:00:40,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:00:40,662 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 52 [2021-11-20 07:00:40,663 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:40,668 INFO L225 Difference]: With dead ends: 307 [2021-11-20 07:00:40,668 INFO L226 Difference]: Without dead ends: 164 [2021-11-20 07:00:40,669 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:00:40,673 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 159 mSDsluCounter, 212 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:40,676 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [162 Valid, 308 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:00:40,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2021-11-20 07:00:40,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 153. [2021-11-20 07:00:40,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 120 states have (on average 1.2583333333333333) internal successors, (151), 127 states have internal predecessors, (151), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2021-11-20 07:00:40,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 188 transitions. [2021-11-20 07:00:40,699 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 188 transitions. Word has length 52 [2021-11-20 07:00:40,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:40,699 INFO L470 AbstractCegarLoop]: Abstraction has 153 states and 188 transitions. [2021-11-20 07:00:40,700 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-20 07:00:40,700 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 188 transitions. [2021-11-20 07:00:40,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-11-20 07:00:40,701 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:40,701 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:40,701 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 07:00:40,701 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:40,702 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:40,702 INFO L85 PathProgramCache]: Analyzing trace with hash -190329197, now seen corresponding path program 1 times [2021-11-20 07:00:40,702 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:40,702 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1724214284] [2021-11-20 07:00:40,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:40,703 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:40,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:00:40,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-20 07:00:40,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-11-20 07:00:40,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:40,765 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:00:40,766 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:40,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1724214284] [2021-11-20 07:00:40,766 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1724214284] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:40,766 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:40,766 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:00:40,766 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617421697] [2021-11-20 07:00:40,767 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:40,767 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:00:40,767 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:40,767 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:00:40,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:00:40,768 INFO L87 Difference]: Start difference. First operand 153 states and 188 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 07:00:41,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:41,007 INFO L93 Difference]: Finished difference Result 438 states and 558 transitions. [2021-11-20 07:00:41,008 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:00:41,008 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2021-11-20 07:00:41,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:41,020 INFO L225 Difference]: With dead ends: 438 [2021-11-20 07:00:41,022 INFO L226 Difference]: Without dead ends: 293 [2021-11-20 07:00:41,023 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:00:41,026 INFO L933 BasicCegarLoop]: 150 mSDtfsCounter, 211 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 330 SdHoareTripleChecker+Invalid, 201 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:41,027 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [218 Valid, 330 Invalid, 201 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:00:41,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 293 states. [2021-11-20 07:00:41,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 293 to 285. [2021-11-20 07:00:41,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 220 states have (on average 1.240909090909091) internal successors, (273), 231 states have internal predecessors, (273), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2021-11-20 07:00:41,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 356 transitions. [2021-11-20 07:00:41,069 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 356 transitions. Word has length 52 [2021-11-20 07:00:41,071 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:41,072 INFO L470 AbstractCegarLoop]: Abstraction has 285 states and 356 transitions. [2021-11-20 07:00:41,072 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 07:00:41,073 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 356 transitions. [2021-11-20 07:00:41,075 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-11-20 07:00:41,076 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:41,076 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:41,076 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 07:00:41,076 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:41,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:41,077 INFO L85 PathProgramCache]: Analyzing trace with hash 2088078071, now seen corresponding path program 1 times [2021-11-20 07:00:41,077 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:41,077 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [913772453] [2021-11-20 07:00:41,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:41,078 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:41,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:00:41,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-20 07:00:41,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:00:41,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-11-20 07:00:41,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,207 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-20 07:00:41,209 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:41,210 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [913772453] [2021-11-20 07:00:41,210 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [913772453] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:41,210 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:41,210 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 07:00:41,211 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484142722] [2021-11-20 07:00:41,211 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:41,211 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 07:00:41,211 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:41,212 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 07:00:41,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:00:41,213 INFO L87 Difference]: Start difference. First operand 285 states and 356 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 07:00:41,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:41,480 INFO L93 Difference]: Finished difference Result 578 states and 733 transitions. [2021-11-20 07:00:41,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 07:00:41,481 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2021-11-20 07:00:41,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:41,485 INFO L225 Difference]: With dead ends: 578 [2021-11-20 07:00:41,485 INFO L226 Difference]: Without dead ends: 301 [2021-11-20 07:00:41,486 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-11-20 07:00:41,487 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 126 mSDsluCounter, 351 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 449 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:41,488 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [132 Valid, 449 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:00:41,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 301 states. [2021-11-20 07:00:41,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 301 to 281. [2021-11-20 07:00:41,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 281 states, 216 states have (on average 1.2083333333333333) internal successors, (261), 227 states have internal predecessors, (261), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2021-11-20 07:00:41,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 281 states to 281 states and 344 transitions. [2021-11-20 07:00:41,515 INFO L78 Accepts]: Start accepts. Automaton has 281 states and 344 transitions. Word has length 54 [2021-11-20 07:00:41,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:41,515 INFO L470 AbstractCegarLoop]: Abstraction has 281 states and 344 transitions. [2021-11-20 07:00:41,516 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 07:00:41,516 INFO L276 IsEmpty]: Start isEmpty. Operand 281 states and 344 transitions. [2021-11-20 07:00:41,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-20 07:00:41,520 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:41,520 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:41,521 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 07:00:41,521 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:41,521 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:41,521 INFO L85 PathProgramCache]: Analyzing trace with hash -312737299, now seen corresponding path program 1 times [2021-11-20 07:00:41,522 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:41,522 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1070449758] [2021-11-20 07:00:41,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:41,522 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:41,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:00:41,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-11-20 07:00:41,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-11-20 07:00:41,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-20 07:00:41,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:41,743 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:00:41,744 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:41,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1070449758] [2021-11-20 07:00:41,744 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1070449758] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:00:41,744 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:00:41,744 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-20 07:00:41,745 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [541797688] [2021-11-20 07:00:41,745 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:00:41,745 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-20 07:00:41,746 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:41,746 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-20 07:00:41,746 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:00:41,747 INFO L87 Difference]: Start difference. First operand 281 states and 344 transitions. Second operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:00:42,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:42,533 INFO L93 Difference]: Finished difference Result 833 states and 1056 transitions. [2021-11-20 07:00:42,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-20 07:00:42,533 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-11-20 07:00:42,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:42,538 INFO L225 Difference]: With dead ends: 833 [2021-11-20 07:00:42,538 INFO L226 Difference]: Without dead ends: 611 [2021-11-20 07:00:42,540 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 199 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2021-11-20 07:00:42,541 INFO L933 BasicCegarLoop]: 155 mSDtfsCounter, 476 mSDsluCounter, 712 mSDsCounter, 0 mSdLazyCounter, 710 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 482 SdHoareTripleChecker+Valid, 867 SdHoareTripleChecker+Invalid, 864 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 710 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:42,541 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [482 Valid, 867 Invalid, 864 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 710 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-20 07:00:42,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 611 states. [2021-11-20 07:00:42,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 611 to 522. [2021-11-20 07:00:42,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 522 states, 403 states have (on average 1.2034739454094292) internal successors, (485), 425 states have internal predecessors, (485), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2021-11-20 07:00:42,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 522 states to 522 states and 631 transitions. [2021-11-20 07:00:42,588 INFO L78 Accepts]: Start accepts. Automaton has 522 states and 631 transitions. Word has length 56 [2021-11-20 07:00:42,589 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:42,589 INFO L470 AbstractCegarLoop]: Abstraction has 522 states and 631 transitions. [2021-11-20 07:00:42,589 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:00:42,589 INFO L276 IsEmpty]: Start isEmpty. Operand 522 states and 631 transitions. [2021-11-20 07:00:42,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-11-20 07:00:42,591 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:42,591 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:42,591 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 07:00:42,592 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:42,592 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:42,592 INFO L85 PathProgramCache]: Analyzing trace with hash -514851068, now seen corresponding path program 1 times [2021-11-20 07:00:42,592 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:42,592 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [214875250] [2021-11-20 07:00:42,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:42,593 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:42,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:00:42,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 07:00:42,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:00:42,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 07:00:42,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-11-20 07:00:42,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 07:00:42,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:00:42,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-20 07:00:42,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,741 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 4 proven. 3 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2021-11-20 07:00:42,741 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:42,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [214875250] [2021-11-20 07:00:42,742 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [214875250] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:00:42,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [947015355] [2021-11-20 07:00:42,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:42,742 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:00:42,742 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:00:42,751 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:00:42,770 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 07:00:42,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:42,861 INFO L263 TraceCheckSpWp]: Trace formula consists of 478 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 07:00:42,878 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:43,254 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 25 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:00:43,255 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:43,547 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-11-20 07:00:43,548 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [947015355] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 07:00:43,548 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 07:00:43,548 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 14 [2021-11-20 07:00:43,548 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1750699356] [2021-11-20 07:00:43,548 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 07:00:43,549 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-20 07:00:43,549 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:43,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-20 07:00:43,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2021-11-20 07:00:43,550 INFO L87 Difference]: Start difference. First operand 522 states and 631 transitions. Second operand has 14 states, 14 states have (on average 8.285714285714286) internal successors, (116), 10 states have internal predecessors, (116), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (16), 5 states have call predecessors, (16), 5 states have call successors, (16) [2021-11-20 07:00:44,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:44,724 INFO L93 Difference]: Finished difference Result 1165 states and 1447 transitions. [2021-11-20 07:00:44,724 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2021-11-20 07:00:44,725 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.285714285714286) internal successors, (116), 10 states have internal predecessors, (116), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (16), 5 states have call predecessors, (16), 5 states have call successors, (16) Word has length 98 [2021-11-20 07:00:44,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:44,730 INFO L225 Difference]: With dead ends: 1165 [2021-11-20 07:00:44,730 INFO L226 Difference]: Without dead ends: 700 [2021-11-20 07:00:44,733 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 265 GetRequests, 221 SyntacticMatches, 1 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 436 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=421, Invalid=1559, Unknown=0, NotChecked=0, Total=1980 [2021-11-20 07:00:44,734 INFO L933 BasicCegarLoop]: 209 mSDtfsCounter, 488 mSDsluCounter, 1112 mSDsCounter, 0 mSdLazyCounter, 875 mSolverCounterSat, 198 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 493 SdHoareTripleChecker+Valid, 1321 SdHoareTripleChecker+Invalid, 1073 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 198 IncrementalHoareTripleChecker+Valid, 875 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:44,735 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [493 Valid, 1321 Invalid, 1073 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [198 Valid, 875 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-20 07:00:44,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 700 states. [2021-11-20 07:00:44,816 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 700 to 592. [2021-11-20 07:00:44,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 592 states, 454 states have (on average 1.198237885462555) internal successors, (544), 483 states have internal predecessors, (544), 71 states have call successors, (71), 61 states have call predecessors, (71), 66 states have return successors, (91), 68 states have call predecessors, (91), 71 states have call successors, (91) [2021-11-20 07:00:44,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 592 states to 592 states and 706 transitions. [2021-11-20 07:00:44,824 INFO L78 Accepts]: Start accepts. Automaton has 592 states and 706 transitions. Word has length 98 [2021-11-20 07:00:44,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:44,825 INFO L470 AbstractCegarLoop]: Abstraction has 592 states and 706 transitions. [2021-11-20 07:00:44,825 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.285714285714286) internal successors, (116), 10 states have internal predecessors, (116), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (16), 5 states have call predecessors, (16), 5 states have call successors, (16) [2021-11-20 07:00:44,826 INFO L276 IsEmpty]: Start isEmpty. Operand 592 states and 706 transitions. [2021-11-20 07:00:44,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-11-20 07:00:44,835 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:00:44,835 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:44,877 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 07:00:45,050 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:00:45,051 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:00:45,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:00:45,051 INFO L85 PathProgramCache]: Analyzing trace with hash 1096172742, now seen corresponding path program 1 times [2021-11-20 07:00:45,051 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:00:45,052 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1877983664] [2021-11-20 07:00:45,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:45,052 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:00:45,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:00:45,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 07:00:45,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:00:45,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 07:00:45,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-11-20 07:00:45,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:00:45,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-11-20 07:00:45,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:00:45,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-20 07:00:45,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:00:45,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 139 [2021-11-20 07:00:45,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2021-11-20 07:00:45,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-11-20 07:00:45,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,283 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 69 proven. 5 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2021-11-20 07:00:45,283 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:00:45,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1877983664] [2021-11-20 07:00:45,284 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1877983664] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:00:45,284 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [576968886] [2021-11-20 07:00:45,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:00:45,284 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:00:45,284 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:00:45,287 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:00:45,306 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 07:00:45,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:00:45,429 INFO L263 TraceCheckSpWp]: Trace formula consists of 678 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-20 07:00:45,440 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:00:45,895 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 140 proven. 4 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-11-20 07:00:45,895 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:00:46,539 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 81 proven. 41 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2021-11-20 07:00:46,540 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [576968886] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 07:00:46,540 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 07:00:46,540 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 11] total 25 [2021-11-20 07:00:46,541 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684417939] [2021-11-20 07:00:46,541 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 07:00:46,542 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2021-11-20 07:00:46,542 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:00:46,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2021-11-20 07:00:46,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=481, Unknown=0, NotChecked=0, Total=600 [2021-11-20 07:00:46,543 INFO L87 Difference]: Start difference. First operand 592 states and 706 transitions. Second operand has 25 states, 25 states have (on average 8.52) internal successors, (213), 21 states have internal predecessors, (213), 9 states have call successors, (27), 9 states have call predecessors, (27), 9 states have return successors, (29), 8 states have call predecessors, (29), 9 states have call successors, (29) [2021-11-20 07:00:47,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:00:47,618 INFO L93 Difference]: Finished difference Result 1257 states and 1548 transitions. [2021-11-20 07:00:47,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-11-20 07:00:47,619 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.52) internal successors, (213), 21 states have internal predecessors, (213), 9 states have call successors, (27), 9 states have call predecessors, (27), 9 states have return successors, (29), 8 states have call predecessors, (29), 9 states have call successors, (29) Word has length 172 [2021-11-20 07:00:47,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:00:47,620 INFO L225 Difference]: With dead ends: 1257 [2021-11-20 07:00:47,620 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 07:00:47,625 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 408 GetRequests, 359 SyntacticMatches, 3 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 428 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=487, Invalid=1769, Unknown=0, NotChecked=0, Total=2256 [2021-11-20 07:00:47,626 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 763 mSDsluCounter, 773 mSDsCounter, 0 mSdLazyCounter, 986 mSolverCounterSat, 240 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 766 SdHoareTripleChecker+Valid, 909 SdHoareTripleChecker+Invalid, 1226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 240 IncrementalHoareTripleChecker+Valid, 986 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-20 07:00:47,626 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [766 Valid, 909 Invalid, 1226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [240 Valid, 986 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-20 07:00:47,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 07:00:47,627 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 07:00:47,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 07:00:47,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 07:00:47,628 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 172 [2021-11-20 07:00:47,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:00:47,628 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 07:00:47,628 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 8.52) internal successors, (213), 21 states have internal predecessors, (213), 9 states have call successors, (27), 9 states have call predecessors, (27), 9 states have return successors, (29), 8 states have call predecessors, (29), 9 states have call successors, (29) [2021-11-20 07:00:47,628 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 07:00:47,629 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 07:00:47,631 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 07:00:47,669 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 07:00:47,850 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:00:47,852 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 07:00:54,141 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 102 108) no Hoare annotation was computed. [2021-11-20 07:00:54,141 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 102 108) the Hoare annotation is: true [2021-11-20 07:00:54,141 INFO L858 garLoopResultBuilder]: For program point L381-1(lines 377 388) no Hoare annotation was computed. [2021-11-20 07:00:54,141 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 377 388) the Hoare annotation is: true [2021-11-20 07:00:54,141 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 377 388) no Hoare annotation was computed. [2021-11-20 07:00:54,141 INFO L858 garLoopResultBuilder]: For program point L929(line 929) no Hoare annotation was computed. [2021-11-20 07:00:54,141 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 908 937) no Hoare annotation was computed. [2021-11-20 07:00:54,141 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 908 937) the Hoare annotation is: true [2021-11-20 07:00:54,141 INFO L858 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2021-11-20 07:00:54,141 INFO L861 garLoopResultBuilder]: At program point L922-1(lines 922 926) the Hoare annotation is: true [2021-11-20 07:00:54,141 INFO L858 garLoopResultBuilder]: For program point L919(line 919) no Hoare annotation was computed. [2021-11-20 07:00:54,142 INFO L861 garLoopResultBuilder]: At program point L918-2(lines 918 932) the Hoare annotation is: true [2021-11-20 07:00:54,142 INFO L861 garLoopResultBuilder]: At program point L914(line 914) the Hoare annotation is: true [2021-11-20 07:00:54,142 INFO L858 garLoopResultBuilder]: For program point L914-1(line 914) no Hoare annotation was computed. [2021-11-20 07:00:54,142 INFO L861 garLoopResultBuilder]: At program point L933(lines 908 937) the Hoare annotation is: true [2021-11-20 07:00:54,142 INFO L854 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse1))) [2021-11-20 07:00:54,143 INFO L854 garLoopResultBuilder]: At program point L155-1(lines 136 160) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse16 (<= ~waterLevel~0 1)) (.cse15 (= 1 ~systemActive~0)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (and .cse0 .cse9 .cse10 .cse16 .cse15 .cse17 .cse8)) (.cse13 (and .cse3 .cse7 .cse16 .cse15 .cse17 .cse8)) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (and .cse9 .cse4)) (.cse2 (not .cse15)) (.cse12 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4) .cse5) (or .cse6 (and .cse7 .cse4 .cse8) (and .cse9 .cse10 .cse4 .cse8) .cse11 .cse2 .cse12 .cse13 .cse14) (or (not (= |old(~waterLevel~0)| 1)) .cse11 .cse2 .cse12 .cse13 .cse14) (or .cse11 .cse2 .cse12 (not (= |old(~waterLevel~0)| 2)) .cse13) (or .cse6 .cse0 .cse1 .cse2) (or .cse2 .cse12 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse5)))) [2021-11-20 07:00:54,143 INFO L858 garLoopResultBuilder]: For program point L89-1(lines 89 95) no Hoare annotation was computed. [2021-11-20 07:00:54,144 INFO L854 garLoopResultBuilder]: At program point L849(line 849) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse10 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse19 (<= ~waterLevel~0 1)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse17 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| ~waterLevel~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (= 1 ~systemActive~0))) (let ((.cse3 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| 2)) (.cse4 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not .cse11)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (and (<= 1 ~pumpRunning~0) .cse14 .cse16 .cse19 .cse11 .cse20 .cse17 .cse12)) (.cse13 (and .cse16 .cse0 .cse2 .cse10 .cse19 .cse11 .cse20 .cse17 .cse12)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5)) (or .cse0 .cse1 .cse6 .cse7) (or .cse1 .cse8 .cse9 (and .cse0 .cse2 .cse10 .cse3 .cse4 .cse11 .cse5 .cse12) .cse7 .cse13 (and .cse14 .cse3 .cse4 .cse5 .cse12) .cse15) (let ((.cse18 (= ~waterLevel~0 1))) (or (and .cse14 .cse16 .cse17 .cse18 .cse12) .cse1 .cse8 .cse6 .cse7 (and .cse16 .cse2 .cse10 .cse17 .cse18 .cse12))) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse8 .cse9 .cse13 .cse15)))) [2021-11-20 07:00:54,144 INFO L858 garLoopResultBuilder]: For program point L849-1(line 849) no Hoare annotation was computed. [2021-11-20 07:00:54,144 INFO L854 garLoopResultBuilder]: At program point L267(lines 252 270) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and (<= 1 ~pumpRunning~0) .cse2 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse7)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse0 .cse1 .cse5 .cse6) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse4)))) [2021-11-20 07:00:54,144 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 75 101) no Hoare annotation was computed. [2021-11-20 07:00:54,145 INFO L854 garLoopResultBuilder]: At program point L449(lines 444 452) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse7)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5)))) [2021-11-20 07:00:54,145 INFO L858 garLoopResultBuilder]: For program point L82(lines 82 88) no Hoare annotation was computed. [2021-11-20 07:00:54,145 INFO L858 garLoopResultBuilder]: For program point L82-2(lines 78 100) no Hoare annotation was computed. [2021-11-20 07:00:54,145 INFO L858 garLoopResultBuilder]: For program point L144(lines 144 152) no Hoare annotation was computed. [2021-11-20 07:00:54,145 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 157) no Hoare annotation was computed. [2021-11-20 07:00:54,146 INFO L854 garLoopResultBuilder]: At program point L834(line 834) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7)) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse4 .cse0 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse3) (or (and .cse5 .cse6 .cse7) (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse0)))) [2021-11-20 07:00:54,146 INFO L858 garLoopResultBuilder]: For program point L834-1(line 834) no Hoare annotation was computed. [2021-11-20 07:00:54,146 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2021-11-20 07:00:54,146 INFO L858 garLoopResultBuilder]: For program point L851(lines 851 861) no Hoare annotation was computed. [2021-11-20 07:00:54,146 INFO L858 garLoopResultBuilder]: For program point L847(lines 847 864) no Hoare annotation was computed. [2021-11-20 07:00:54,146 INFO L854 garLoopResultBuilder]: At program point L174(lines 169 176) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse9 (= 1 ~systemActive~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (and .cse8 .cse1 .cse2 (<= ~waterLevel~0 1) .cse9 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse9)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2 (= ~waterLevel~0 1) .cse3) .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse5) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse6 .cse0 .cse4 .cse7) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse4 .cse7) (or .cse8 .cse0 .cse5)))) [2021-11-20 07:00:54,147 INFO L854 garLoopResultBuilder]: At program point L847-1(lines 839 867) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse22 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse7 (<= 1 ~pumpRunning~0)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse23 (<= ~waterLevel~0 1)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse19 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| ~waterLevel~0)) (.cse21 (<= 1 ~switchedOnBeforeTS~0)) (.cse18 (= 1 ~systemActive~0))) (let ((.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not .cse18)) (.cse12 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| 2)) (.cse5 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (and .cse7 .cse16 .cse17 .cse1 .cse23 .cse18 .cse24 .cse19 .cse21)) (.cse14 (and .cse17 .cse1 .cse3 .cse22 .cse23 .cse18 .cse24 .cse19 .cse21)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6)) (let ((.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1| 2)) (.cse9 (= 2 |timeShift_getWaterLevel_#res#1|))) (or .cse1 .cse2 (and .cse7 .cse8 .cse9 .cse6) .cse10 (and .cse3 .cse8 .cse9 .cse6) .cse11)) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse12 .cse13 .cse14 .cse15) (let ((.cse20 (= ~waterLevel~0 1))) (or (and .cse16 .cse17 .cse1 .cse18 .cse19 .cse20 .cse21) .cse2 .cse12 .cse10 (and .cse17 .cse1 .cse3 .cse22 .cse18 .cse19 .cse20 .cse21) .cse11)) (or .cse0 .cse2 .cse12 (and .cse16 .cse1 .cse4 .cse5 .cse18 .cse6 .cse21) (and .cse1 .cse3 .cse22 .cse4 .cse5 .cse18 .cse6 .cse21) .cse13 .cse14 .cse15)))) [2021-11-20 07:00:54,147 INFO L854 garLoopResultBuilder]: At program point L426(lines 421 429) the Hoare annotation is: (let ((.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse19 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse11 (= 1 ~systemActive~0)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse13 (and .cse19 .cse7 .cse0 .cse16 .cse11 .cse20 .cse4)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (and .cse0 .cse9 .cse1 .cse2 .cse16 .cse11 .cse20 .cse4)) (.cse5 (not .cse11)) (.cse10 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) .cse5 .cse6 (not (< 1 |old(~waterLevel~0)|)) (and .cse7 .cse0 .cse3 .cse4) .cse8)) (or (and .cse9 .cse1 .cse2 .cse10 .cse11 .cse12 .cse4) (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse6 .cse13 (and .cse7 .cse10 .cse12 .cse4) .cse14 .cse15) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6 .cse13 .cse14 .cse15) (let ((.cse17 (= 2 ~waterLevel~0)) (.cse18 (= 2 |timeShift_getWaterLevel_#res#1|))) (or .cse9 .cse5 (and .cse1 .cse10 .cse16 .cse12) (and .cse1 .cse17 .cse18 .cse12) .cse8 (and .cse19 .cse17 .cse18 .cse12)))))) [2021-11-20 07:00:54,147 INFO L858 garLoopResultBuilder]: For program point L261(lines 261 265) no Hoare annotation was computed. [2021-11-20 07:00:54,148 INFO L858 garLoopResultBuilder]: For program point L261-2(lines 261 265) no Hoare annotation was computed. [2021-11-20 07:00:54,148 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2021-11-20 07:00:54,148 INFO L854 garLoopResultBuilder]: At program point L150(line 150) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse7)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5)))) [2021-11-20 07:00:54,148 INFO L858 garLoopResultBuilder]: For program point L852(lines 852 858) no Hoare annotation was computed. [2021-11-20 07:00:54,149 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 75 101) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7)) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse4 .cse0 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse3) (or (and .cse5 .cse6 .cse7) (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse0)))) [2021-11-20 07:00:54,149 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 75 101) no Hoare annotation was computed. [2021-11-20 07:00:54,149 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-11-20 07:00:54,149 INFO L858 garLoopResultBuilder]: For program point L357(lines 357 361) no Hoare annotation was computed. [2021-11-20 07:00:54,149 INFO L854 garLoopResultBuilder]: At program point L836(lines 829 838) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or .cse3 .cse1 .cse4 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-11-20 07:00:54,150 INFO L854 garLoopResultBuilder]: At program point L357-2(lines 353 364) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse7)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5)))) [2021-11-20 07:00:54,150 INFO L854 garLoopResultBuilder]: At program point L894(lines 890 896) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:00:54,150 INFO L854 garLoopResultBuilder]: At program point L341(lines 292 342) the Hoare annotation is: false [2021-11-20 07:00:54,150 INFO L861 garLoopResultBuilder]: At program point L977(lines 969 979) the Hoare annotation is: true [2021-11-20 07:00:54,150 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 07:00:54,150 INFO L858 garLoopResultBuilder]: For program point L990(lines 990 997) no Hoare annotation was computed. [2021-11-20 07:00:54,151 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 07:00:54,151 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 07:00:54,151 INFO L858 garLoopResultBuilder]: For program point L990-2(lines 990 997) no Hoare annotation was computed. [2021-11-20 07:00:54,151 INFO L858 garLoopResultBuilder]: For program point L313(lines 313 319) no Hoare annotation was computed. [2021-11-20 07:00:54,151 INFO L858 garLoopResultBuilder]: For program point L313-1(lines 313 319) no Hoare annotation was computed. [2021-11-20 07:00:54,151 INFO L854 garLoopResultBuilder]: At program point L887(lines 883 889) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:00:54,152 INFO L854 garLoopResultBuilder]: At program point L276(lines 271 278) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2021-11-20 07:00:54,152 INFO L854 garLoopResultBuilder]: At program point L338(lines 293 340) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse4 .cse5 .cse2 .cse3) (and .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3))) [2021-11-20 07:00:54,152 INFO L854 garLoopResultBuilder]: At program point L305(line 305) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse4 .cse5 .cse2 .cse3) (and .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3))) [2021-11-20 07:00:54,152 INFO L861 garLoopResultBuilder]: At program point L999(lines 980 1002) the Hoare annotation is: true [2021-11-20 07:00:54,152 INFO L854 garLoopResultBuilder]: At program point L966(lines 962 968) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:00:54,152 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 07:00:54,153 INFO L854 garLoopResultBuilder]: At program point L826(lines 821 828) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:00:54,153 INFO L858 garLoopResultBuilder]: For program point L331(lines 331 335) no Hoare annotation was computed. [2021-11-20 07:00:54,153 INFO L854 garLoopResultBuilder]: At program point L331-2(lines 323 336) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2021-11-20 07:00:54,153 INFO L858 garLoopResultBuilder]: For program point L294(lines 293 340) no Hoare annotation was computed. [2021-11-20 07:00:54,153 INFO L858 garLoopResultBuilder]: For program point L323(lines 323 336) no Hoare annotation was computed. [2021-11-20 07:00:54,153 INFO L854 garLoopResultBuilder]: At program point L315(line 315) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2021-11-20 07:00:54,154 INFO L861 garLoopResultBuilder]: At program point L344(lines 283 348) the Hoare annotation is: true [2021-11-20 07:00:54,154 INFO L858 garLoopResultBuilder]: For program point L303(lines 303 309) no Hoare annotation was computed. [2021-11-20 07:00:54,154 INFO L858 garLoopResultBuilder]: For program point L303-1(lines 303 309) no Hoare annotation was computed. [2021-11-20 07:00:54,154 INFO L858 garLoopResultBuilder]: For program point L295(lines 295 299) no Hoare annotation was computed. [2021-11-20 07:00:54,154 INFO L854 garLoopResultBuilder]: At program point L902(lines 897 905) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:00:54,155 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 110 134) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2021-11-20 07:00:54,155 INFO L854 garLoopResultBuilder]: At program point L124(line 124) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 07:00:54,155 INFO L854 garLoopResultBuilder]: At program point L248(lines 233 251) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0)) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) (and .cse1 (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 07:00:54,155 INFO L858 garLoopResultBuilder]: For program point L118(lines 118 126) no Hoare annotation was computed. [2021-11-20 07:00:54,155 INFO L858 garLoopResultBuilder]: For program point L114(lines 114 131) no Hoare annotation was computed. [2021-11-20 07:00:54,156 INFO L858 garLoopResultBuilder]: For program point L434(lines 434 440) no Hoare annotation was computed. [2021-11-20 07:00:54,156 INFO L858 garLoopResultBuilder]: For program point L242(lines 242 246) no Hoare annotation was computed. [2021-11-20 07:00:54,156 INFO L858 garLoopResultBuilder]: For program point L242-2(lines 242 246) no Hoare annotation was computed. [2021-11-20 07:00:54,156 INFO L854 garLoopResultBuilder]: At program point L166(lines 161 168) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 1)))) (and (or (<= 1 ~pumpRunning~0) .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2))) [2021-11-20 07:00:54,156 INFO L854 garLoopResultBuilder]: At program point L129(line 129) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-11-20 07:00:54,156 INFO L858 garLoopResultBuilder]: For program point L129-1(lines 110 134) no Hoare annotation was computed. [2021-11-20 07:00:54,157 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 110 134) no Hoare annotation was computed. [2021-11-20 07:00:54,157 INFO L854 garLoopResultBuilder]: At program point L439(lines 430 443) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse1 (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 07:00:54,157 INFO L858 garLoopResultBuilder]: For program point L369-1(lines 365 376) no Hoare annotation was computed. [2021-11-20 07:00:54,157 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 365 376) no Hoare annotation was computed. [2021-11-20 07:00:54,157 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 365 376) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse0 .cse2 (not (<= |old(~waterLevel~0)| 2))))) [2021-11-20 07:00:54,158 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 188 196) no Hoare annotation was computed. [2021-11-20 07:00:54,158 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 188 196) the Hoare annotation is: true [2021-11-20 07:00:54,158 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 188 196) no Hoare annotation was computed. [2021-11-20 07:00:54,161 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:00:54,163 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 07:00:54,219 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 07:00:54 BoogieIcfgContainer [2021-11-20 07:00:54,220 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 07:00:54,220 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 07:00:54,220 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 07:00:54,220 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 07:00:54,221 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:00:38" (3/4) ... [2021-11-20 07:00:54,224 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 07:00:54,230 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 07:00:54,230 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 07:00:54,230 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 07:00:54,230 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 07:00:54,231 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 07:00:54,231 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 07:00:54,231 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-20 07:00:54,240 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-11-20 07:00:54,241 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 07:00:54,242 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 07:00:54,242 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 07:00:54,243 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 07:00:54,243 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 07:00:54,244 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 07:00:54,268 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 07:00:54,268 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-20 07:00:54,269 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp < 2) && \result < 2) && \old(waterLevel) == waterLevel)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && tmp == 2) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || (((pumpRunning == 0 && tmp == 2) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && 1 == systemActive) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp < 2) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && tmp < 2) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 07:00:54,269 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2021-11-20 07:00:54,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-20 07:00:54,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((\result <= waterLevel && pumpRunning == 0) && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) [2021-11-20 07:00:54,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-20 07:00:54,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2021-11-20 07:00:54,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-20 07:00:54,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(tmp == 0) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2021-11-20 07:00:54,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || (((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-20 07:00:54,272 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 == waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2021-11-20 07:00:54,302 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 07:00:54,305 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 07:00:54,306 INFO L158 Benchmark]: Toolchain (without parser) took 17179.97ms. Allocated memory was 98.6MB in the beginning and 192.9MB in the end (delta: 94.4MB). Free memory was 55.5MB in the beginning and 117.1MB in the end (delta: -61.5MB). Peak memory consumption was 32.0MB. Max. memory is 16.1GB. [2021-11-20 07:00:54,307 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 98.6MB. Free memory was 73.2MB in the beginning and 73.2MB in the end (delta: 46.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 07:00:54,307 INFO L158 Benchmark]: CACSL2BoogieTranslator took 665.59ms. Allocated memory is still 98.6MB. Free memory was 55.3MB in the beginning and 62.7MB in the end (delta: -7.4MB). Peak memory consumption was 4.3MB. Max. memory is 16.1GB. [2021-11-20 07:00:54,307 INFO L158 Benchmark]: Boogie Procedure Inliner took 73.55ms. Allocated memory is still 98.6MB. Free memory was 62.7MB in the beginning and 60.0MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 07:00:54,308 INFO L158 Benchmark]: Boogie Preprocessor took 61.08ms. Allocated memory is still 98.6MB. Free memory was 60.0MB in the beginning and 58.5MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 07:00:54,308 INFO L158 Benchmark]: RCFGBuilder took 756.42ms. Allocated memory is still 98.6MB. Free memory was 58.5MB in the beginning and 42.0MB in the end (delta: 16.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-20 07:00:54,309 INFO L158 Benchmark]: TraceAbstraction took 15530.24ms. Allocated memory was 98.6MB in the beginning and 192.9MB in the end (delta: 94.4MB). Free memory was 41.4MB in the beginning and 124.4MB in the end (delta: -83.0MB). Peak memory consumption was 85.2MB. Max. memory is 16.1GB. [2021-11-20 07:00:54,309 INFO L158 Benchmark]: Witness Printer took 85.56ms. Allocated memory is still 192.9MB. Free memory was 124.4MB in the beginning and 117.1MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-20 07:00:54,311 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 98.6MB. Free memory was 73.2MB in the beginning and 73.2MB in the end (delta: 46.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 665.59ms. Allocated memory is still 98.6MB. Free memory was 55.3MB in the beginning and 62.7MB in the end (delta: -7.4MB). Peak memory consumption was 4.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 73.55ms. Allocated memory is still 98.6MB. Free memory was 62.7MB in the beginning and 60.0MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 61.08ms. Allocated memory is still 98.6MB. Free memory was 60.0MB in the beginning and 58.5MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 756.42ms. Allocated memory is still 98.6MB. Free memory was 58.5MB in the beginning and 42.0MB in the end (delta: 16.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 15530.24ms. Allocated memory was 98.6MB in the beginning and 192.9MB in the end (delta: 94.4MB). Free memory was 41.4MB in the beginning and 124.4MB in the end (delta: -83.0MB). Peak memory consumption was 85.2MB. Max. memory is 16.1GB. * Witness Printer took 85.56ms. Allocated memory is still 192.9MB. Free memory was 124.4MB in the beginning and 117.1MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.4s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 4.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2622 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2583 mSDsluCounter, 5290 SdHoareTripleChecker+Invalid, 2.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3908 mSDsCounter, 787 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3162 IncrementalHoareTripleChecker+Invalid, 3949 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 787 mSolverCounterUnsat, 1382 mSDtfsCounter, 3162 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 823 GetRequests, 658 SyntacticMatches, 5 SemanticMatches, 160 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1097 ImplicationChecksByTransitivity, 1.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=592occurred in iteration=10, InterpolantAutomatonStates: 140, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 247 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1363 PreInvPairs, 1644 NumberOfFragments, 2845 HoareAnnotationTreeSize, 1363 FomulaSimplifications, 2162 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 43 FomulaSimplificationsInter, 24291 FormulaSimplificationTreeSizeReductionInter, 5.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.0s InterpolantComputationTime, 957 NumberOfCodeBlocks, 957 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1212 ConstructedInterpolants, 0 QuantifiedInterpolants, 2380 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1156 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 635/705 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 == waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 980]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || (((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 283]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: (((((((((((\result <= waterLevel && pumpRunning == 0) && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(tmp == 0) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp < 2) && \result < 2) && \old(waterLevel) == waterLevel)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && tmp == 2) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || (((pumpRunning == 0 && tmp == 2) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && 1 == systemActive) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp < 2) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && tmp < 2) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2021-11-20 07:00:54,398 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34579e3a-c9d0-4f5f-9680-627c96f51869/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE