./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1ef39c14b0f41147d1df64069011556a64ce74ff520b071f62407c2225292c50 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 05:56:36,652 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 05:56:36,656 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 05:56:36,730 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 05:56:36,731 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 05:56:36,736 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 05:56:36,739 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 05:56:36,744 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 05:56:36,748 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 05:56:36,755 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 05:56:36,757 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 05:56:36,759 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 05:56:36,760 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 05:56:36,763 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 05:56:36,766 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 05:56:36,773 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 05:56:36,775 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 05:56:36,777 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 05:56:36,780 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 05:56:36,791 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 05:56:36,793 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 05:56:36,795 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 05:56:36,800 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 05:56:36,801 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 05:56:36,813 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 05:56:36,814 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 05:56:36,814 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 05:56:36,817 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 05:56:36,818 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 05:56:36,820 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 05:56:36,820 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 05:56:36,822 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 05:56:36,824 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 05:56:36,826 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 05:56:36,828 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 05:56:36,829 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 05:56:36,830 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 05:56:36,830 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 05:56:36,831 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 05:56:36,832 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 05:56:36,833 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 05:56:36,834 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 05:56:36,889 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 05:56:36,890 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 05:56:36,891 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 05:56:36,891 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 05:56:36,892 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 05:56:36,893 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 05:56:36,894 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 05:56:36,895 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 05:56:36,895 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 05:56:36,895 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 05:56:36,897 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 05:56:36,897 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 05:56:36,898 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 05:56:36,898 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 05:56:36,898 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 05:56:36,899 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 05:56:36,899 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 05:56:36,899 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 05:56:36,899 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 05:56:36,900 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 05:56:36,900 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 05:56:36,900 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 05:56:36,901 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 05:56:36,901 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 05:56:36,901 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 05:56:36,902 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 05:56:36,902 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 05:56:36,902 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 05:56:36,903 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 05:56:36,905 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 05:56:36,905 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 05:56:36,905 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 05:56:36,906 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 05:56:36,906 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 05:56:36,907 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1ef39c14b0f41147d1df64069011556a64ce74ff520b071f62407c2225292c50 [2021-11-20 05:56:37,315 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 05:56:37,351 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 05:56:37,354 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 05:56:37,356 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 05:56:37,360 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 05:56:37,362 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c [2021-11-20 05:56:37,458 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/data/7101099fa/2ae90e9e8bf64195bf0de0fe971d9f76/FLAG2f041102c [2021-11-20 05:56:38,191 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 05:56:38,193 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c [2021-11-20 05:56:38,216 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/data/7101099fa/2ae90e9e8bf64195bf0de0fe971d9f76/FLAG2f041102c [2021-11-20 05:56:38,491 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/data/7101099fa/2ae90e9e8bf64195bf0de0fe971d9f76 [2021-11-20 05:56:38,495 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 05:56:38,499 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 05:56:38,504 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 05:56:38,505 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 05:56:38,509 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 05:56:38,510 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:56:38" (1/1) ... [2021-11-20 05:56:38,512 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@232fed4a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:38, skipping insertion in model container [2021-11-20 05:56:38,513 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:56:38" (1/1) ... [2021-11-20 05:56:38,523 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 05:56:38,599 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 05:56:39,028 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2021-11-20 05:56:39,046 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 05:56:39,073 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 05:56:39,198 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2021-11-20 05:56:39,203 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 05:56:39,233 INFO L208 MainTranslator]: Completed translation [2021-11-20 05:56:39,234 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39 WrapperNode [2021-11-20 05:56:39,234 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 05:56:39,237 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 05:56:39,238 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 05:56:39,238 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 05:56:39,248 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,291 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,332 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 265 [2021-11-20 05:56:39,333 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 05:56:39,334 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 05:56:39,334 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 05:56:39,334 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 05:56:39,345 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,345 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,349 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,349 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,368 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,375 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,390 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,394 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 05:56:39,395 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 05:56:39,395 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 05:56:39,395 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 05:56:39,403 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (1/1) ... [2021-11-20 05:56:39,413 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 05:56:39,432 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:56:39,451 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 05:56:39,462 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 05:56:39,506 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 05:56:39,506 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 05:56:39,506 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 05:56:39,507 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 05:56:39,507 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 05:56:39,507 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 05:56:39,507 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 05:56:39,507 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 05:56:39,508 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 05:56:39,508 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 05:56:39,508 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 05:56:39,508 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-20 05:56:39,509 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-20 05:56:39,509 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-20 05:56:39,509 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-20 05:56:39,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 05:56:39,510 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 05:56:39,510 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 05:56:39,510 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 05:56:39,510 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 05:56:39,607 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 05:56:39,610 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 05:56:40,097 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 05:56:40,107 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 05:56:40,108 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 05:56:40,111 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:56:40 BoogieIcfgContainer [2021-11-20 05:56:40,111 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 05:56:40,113 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 05:56:40,114 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 05:56:40,123 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 05:56:40,124 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 05:56:38" (1/3) ... [2021-11-20 05:56:40,125 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@382a1d14 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 05:56:40, skipping insertion in model container [2021-11-20 05:56:40,125 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:56:39" (2/3) ... [2021-11-20 05:56:40,126 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@382a1d14 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 05:56:40, skipping insertion in model container [2021-11-20 05:56:40,126 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:56:40" (3/3) ... [2021-11-20 05:56:40,128 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product51.cil.c [2021-11-20 05:56:40,140 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 05:56:40,140 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 05:56:40,231 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 05:56:40,243 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 05:56:40,244 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 05:56:40,291 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2021-11-20 05:56:40,307 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-20 05:56:40,307 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:56:40,308 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:40,309 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:56:40,316 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:56:40,317 INFO L85 PathProgramCache]: Analyzing trace with hash 764297473, now seen corresponding path program 1 times [2021-11-20 05:56:40,330 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:56:40,330 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1921761028] [2021-11-20 05:56:40,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:40,332 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:56:40,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:40,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 05:56:40,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:40,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 05:56:40,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:40,676 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:56:40,681 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:56:40,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1921761028] [2021-11-20 05:56:40,682 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1921761028] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:56:40,683 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:56:40,684 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 05:56:40,686 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391026137] [2021-11-20 05:56:40,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:56:40,693 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 05:56:40,694 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:56:40,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 05:56:40,738 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 05:56:40,743 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:56:40,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:56:40,832 INFO L93 Difference]: Finished difference Result 189 states and 256 transitions. [2021-11-20 05:56:40,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 05:56:40,838 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-11-20 05:56:40,838 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:56:40,853 INFO L225 Difference]: With dead ends: 189 [2021-11-20 05:56:40,853 INFO L226 Difference]: Without dead ends: 90 [2021-11-20 05:56:40,859 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 05:56:40,864 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 05:56:40,865 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 05:56:40,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-11-20 05:56:40,936 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-11-20 05:56:40,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-11-20 05:56:40,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2021-11-20 05:56:40,942 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 32 [2021-11-20 05:56:40,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:56:40,943 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2021-11-20 05:56:40,943 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:56:40,944 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2021-11-20 05:56:40,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-11-20 05:56:40,948 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:56:40,948 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:40,949 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 05:56:40,949 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:56:40,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:56:40,950 INFO L85 PathProgramCache]: Analyzing trace with hash -297054839, now seen corresponding path program 1 times [2021-11-20 05:56:40,950 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:56:40,950 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1926618738] [2021-11-20 05:56:40,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:40,951 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:56:40,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:41,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:56:41,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:41,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-11-20 05:56:41,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:41,144 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:56:41,144 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:56:41,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1926618738] [2021-11-20 05:56:41,145 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1926618738] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:56:41,145 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:56:41,146 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:56:41,146 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1840449727] [2021-11-20 05:56:41,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:56:41,148 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:56:41,148 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:56:41,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:56:41,149 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:56:41,149 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 05:56:41,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:56:41,590 INFO L93 Difference]: Finished difference Result 309 states and 412 transitions. [2021-11-20 05:56:41,591 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 05:56:41,591 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-11-20 05:56:41,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:56:41,597 INFO L225 Difference]: With dead ends: 309 [2021-11-20 05:56:41,597 INFO L226 Difference]: Without dead ends: 227 [2021-11-20 05:56:41,600 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 05:56:41,602 INFO L933 BasicCegarLoop]: 146 mSDtfsCounter, 239 mSDsluCounter, 443 mSDsCounter, 0 mSdLazyCounter, 130 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 589 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 130 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 05:56:41,603 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [239 Valid, 589 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 05:56:41,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2021-11-20 05:56:41,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 221. [2021-11-20 05:56:41,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 164 states have (on average 1.329268292682927) internal successors, (218), 182 states have internal predecessors, (218), 37 states have call successors, (37), 22 states have call predecessors, (37), 19 states have return successors, (37), 26 states have call predecessors, (37), 34 states have call successors, (37) [2021-11-20 05:56:41,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 292 transitions. [2021-11-20 05:56:41,654 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 292 transitions. Word has length 37 [2021-11-20 05:56:41,655 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:56:41,655 INFO L470 AbstractCegarLoop]: Abstraction has 221 states and 292 transitions. [2021-11-20 05:56:41,656 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 05:56:41,656 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 292 transitions. [2021-11-20 05:56:41,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-11-20 05:56:41,660 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:56:41,660 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:41,660 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 05:56:41,661 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:56:41,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:56:41,662 INFO L85 PathProgramCache]: Analyzing trace with hash -1133604870, now seen corresponding path program 1 times [2021-11-20 05:56:41,662 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:56:41,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [721598621] [2021-11-20 05:56:41,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:41,663 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:56:41,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:41,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 05:56:41,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:41,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-11-20 05:56:41,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:41,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:56:41,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:41,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 05:56:41,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:41,783 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:56:41,783 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:56:41,784 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [721598621] [2021-11-20 05:56:41,784 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [721598621] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:56:41,785 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:56:41,785 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-20 05:56:41,785 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1718817847] [2021-11-20 05:56:41,785 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:56:41,786 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 05:56:41,786 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:56:41,787 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 05:56:41,787 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-20 05:56:41,788 INFO L87 Difference]: Start difference. First operand 221 states and 292 transitions. Second operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 05:56:41,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:56:41,896 INFO L93 Difference]: Finished difference Result 370 states and 484 transitions. [2021-11-20 05:56:41,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 05:56:41,897 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 43 [2021-11-20 05:56:41,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:56:41,900 INFO L225 Difference]: With dead ends: 370 [2021-11-20 05:56:41,900 INFO L226 Difference]: Without dead ends: 222 [2021-11-20 05:56:41,902 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-20 05:56:41,904 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 69 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:56:41,905 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 191 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:56:41,906 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2021-11-20 05:56:41,940 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 194. [2021-11-20 05:56:41,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 194 states, 146 states have (on average 1.3493150684931507) internal successors, (197), 164 states have internal predecessors, (197), 28 states have call successors, (28), 19 states have call predecessors, (28), 19 states have return successors, (29), 20 states have call predecessors, (29), 28 states have call successors, (29) [2021-11-20 05:56:41,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 254 transitions. [2021-11-20 05:56:41,944 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 254 transitions. Word has length 43 [2021-11-20 05:56:41,945 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:56:41,945 INFO L470 AbstractCegarLoop]: Abstraction has 194 states and 254 transitions. [2021-11-20 05:56:41,945 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 05:56:41,946 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 254 transitions. [2021-11-20 05:56:41,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-11-20 05:56:41,949 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:56:41,949 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:41,949 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 05:56:41,950 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:56:41,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:56:41,950 INFO L85 PathProgramCache]: Analyzing trace with hash 1125311, now seen corresponding path program 1 times [2021-11-20 05:56:41,951 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:56:41,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421687934] [2021-11-20 05:56:41,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:41,952 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:56:41,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:42,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 05:56:42,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:42,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-11-20 05:56:42,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:42,165 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-20 05:56:42,166 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:56:42,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421687934] [2021-11-20 05:56:42,166 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1421687934] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:56:42,168 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:56:42,168 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:56:42,169 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [409756564] [2021-11-20 05:56:42,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:56:42,171 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:56:42,171 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:56:42,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:56:42,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:56:42,172 INFO L87 Difference]: Start difference. First operand 194 states and 254 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:56:42,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:56:42,388 INFO L93 Difference]: Finished difference Result 478 states and 641 transitions. [2021-11-20 05:56:42,389 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 05:56:42,389 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-11-20 05:56:42,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:56:42,394 INFO L225 Difference]: With dead ends: 478 [2021-11-20 05:56:42,395 INFO L226 Difference]: Without dead ends: 292 [2021-11-20 05:56:42,397 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-20 05:56:42,399 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 49 mSDsluCounter, 380 mSDsCounter, 0 mSdLazyCounter, 68 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 497 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 68 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:56:42,400 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [50 Valid, 497 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 68 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:56:42,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 292 states. [2021-11-20 05:56:42,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 292 to 275. [2021-11-20 05:56:42,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 207 states have (on average 1.289855072463768) internal successors, (267), 224 states have internal predecessors, (267), 37 states have call successors, (37), 30 states have call predecessors, (37), 30 states have return successors, (47), 34 states have call predecessors, (47), 37 states have call successors, (47) [2021-11-20 05:56:42,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 351 transitions. [2021-11-20 05:56:42,467 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 351 transitions. Word has length 41 [2021-11-20 05:56:42,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:56:42,468 INFO L470 AbstractCegarLoop]: Abstraction has 275 states and 351 transitions. [2021-11-20 05:56:42,469 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:56:42,469 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 351 transitions. [2021-11-20 05:56:42,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-20 05:56:42,472 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:56:42,472 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:42,473 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 05:56:42,473 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:56:42,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:56:42,474 INFO L85 PathProgramCache]: Analyzing trace with hash 1784621037, now seen corresponding path program 1 times [2021-11-20 05:56:42,474 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:56:42,475 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1310725265] [2021-11-20 05:56:42,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:42,475 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:56:42,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:42,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:56:42,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:42,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:56:42,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:42,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-11-20 05:56:42,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:42,610 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:56:42,611 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:56:42,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1310725265] [2021-11-20 05:56:42,611 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1310725265] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:56:42,612 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:56:42,612 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:56:42,612 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [804145583] [2021-11-20 05:56:42,612 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:56:42,613 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:56:42,613 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:56:42,614 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:56:42,614 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:56:42,615 INFO L87 Difference]: Start difference. First operand 275 states and 351 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:56:42,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:56:42,876 INFO L93 Difference]: Finished difference Result 602 states and 780 transitions. [2021-11-20 05:56:42,876 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 05:56:42,876 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-11-20 05:56:42,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:56:42,882 INFO L225 Difference]: With dead ends: 602 [2021-11-20 05:56:42,882 INFO L226 Difference]: Without dead ends: 335 [2021-11-20 05:56:42,917 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:56:42,919 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 68 mSDsluCounter, 308 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 406 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:56:42,920 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [71 Valid, 406 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:56:42,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2021-11-20 05:56:42,967 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 327. [2021-11-20 05:56:42,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 249 states have (on average 1.2730923694779117) internal successors, (317), 266 states have internal predecessors, (317), 41 states have call successors, (41), 30 states have call predecessors, (41), 36 states have return successors, (57), 42 states have call predecessors, (57), 41 states have call successors, (57) [2021-11-20 05:56:42,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 415 transitions. [2021-11-20 05:56:42,973 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 415 transitions. Word has length 51 [2021-11-20 05:56:42,974 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:56:42,974 INFO L470 AbstractCegarLoop]: Abstraction has 327 states and 415 transitions. [2021-11-20 05:56:42,975 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:56:42,975 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 415 transitions. [2021-11-20 05:56:42,978 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-20 05:56:42,978 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:56:42,979 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:42,979 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 05:56:42,979 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:56:42,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:56:42,980 INFO L85 PathProgramCache]: Analyzing trace with hash 95677295, now seen corresponding path program 1 times [2021-11-20 05:56:42,981 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:56:42,981 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1398988609] [2021-11-20 05:56:42,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:42,982 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:56:43,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:43,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:56:43,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:43,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:56:43,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:43,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-11-20 05:56:43,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:43,124 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:56:43,125 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:56:43,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1398988609] [2021-11-20 05:56:43,125 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1398988609] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:56:43,126 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:56:43,126 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 05:56:43,126 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1991719907] [2021-11-20 05:56:43,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:56:43,127 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 05:56:43,127 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:56:43,128 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 05:56:43,128 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 05:56:43,128 INFO L87 Difference]: Start difference. First operand 327 states and 415 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 6 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:56:43,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:56:43,391 INFO L93 Difference]: Finished difference Result 670 states and 873 transitions. [2021-11-20 05:56:43,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 05:56:43,392 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 6 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-11-20 05:56:43,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:56:43,406 INFO L225 Difference]: With dead ends: 670 [2021-11-20 05:56:43,406 INFO L226 Difference]: Without dead ends: 351 [2021-11-20 05:56:43,409 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2021-11-20 05:56:43,421 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 119 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 140 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:56:43,422 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [123 Valid, 440 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:56:43,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2021-11-20 05:56:43,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 331. [2021-11-20 05:56:43,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 253 states have (on average 1.2687747035573123) internal successors, (321), 270 states have internal predecessors, (321), 41 states have call successors, (41), 30 states have call predecessors, (41), 36 states have return successors, (57), 42 states have call predecessors, (57), 41 states have call successors, (57) [2021-11-20 05:56:43,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 419 transitions. [2021-11-20 05:56:43,503 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 419 transitions. Word has length 51 [2021-11-20 05:56:43,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:56:43,504 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 419 transitions. [2021-11-20 05:56:43,505 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 6 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:56:43,505 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 419 transitions. [2021-11-20 05:56:43,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-20 05:56:43,519 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:56:43,519 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:43,519 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 05:56:43,520 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:56:43,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:56:43,520 INFO L85 PathProgramCache]: Analyzing trace with hash 518379121, now seen corresponding path program 1 times [2021-11-20 05:56:43,521 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:56:43,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1071485214] [2021-11-20 05:56:43,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:43,521 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:56:43,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:43,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:56:43,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:43,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:56:43,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:43,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-11-20 05:56:43,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:43,664 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:56:43,665 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:56:43,665 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1071485214] [2021-11-20 05:56:43,665 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1071485214] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:56:43,665 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:56:43,665 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 05:56:43,666 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [603444149] [2021-11-20 05:56:43,666 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:56:43,666 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 05:56:43,667 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:56:43,667 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 05:56:43,667 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 05:56:43,668 INFO L87 Difference]: Start difference. First operand 331 states and 419 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:56:43,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:56:43,985 INFO L93 Difference]: Finished difference Result 996 states and 1308 transitions. [2021-11-20 05:56:43,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 05:56:43,987 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-11-20 05:56:43,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:56:44,000 INFO L225 Difference]: With dead ends: 996 [2021-11-20 05:56:44,000 INFO L226 Difference]: Without dead ends: 673 [2021-11-20 05:56:44,003 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 05:56:44,007 INFO L933 BasicCegarLoop]: 152 mSDtfsCounter, 222 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:56:44,009 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [229 Valid, 347 Invalid, 213 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:56:44,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 673 states. [2021-11-20 05:56:44,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 673 to 666. [2021-11-20 05:56:44,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 666 states, 505 states have (on average 1.2356435643564356) internal successors, (624), 534 states have internal predecessors, (624), 88 states have call successors, (88), 71 states have call predecessors, (88), 72 states have return successors, (133), 86 states have call predecessors, (133), 88 states have call successors, (133) [2021-11-20 05:56:44,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 666 states to 666 states and 845 transitions. [2021-11-20 05:56:44,146 INFO L78 Accepts]: Start accepts. Automaton has 666 states and 845 transitions. Word has length 51 [2021-11-20 05:56:44,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:56:44,148 INFO L470 AbstractCegarLoop]: Abstraction has 666 states and 845 transitions. [2021-11-20 05:56:44,151 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:56:44,151 INFO L276 IsEmpty]: Start isEmpty. Operand 666 states and 845 transitions. [2021-11-20 05:56:44,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-11-20 05:56:44,153 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:56:44,153 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:44,154 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 05:56:44,154 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:56:44,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:56:44,155 INFO L85 PathProgramCache]: Analyzing trace with hash -1241994025, now seen corresponding path program 1 times [2021-11-20 05:56:44,156 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:56:44,156 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1137414017] [2021-11-20 05:56:44,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:44,156 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:56:44,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:44,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:56:44,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:44,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 05:56:44,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:44,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-20 05:56:44,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:44,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-11-20 05:56:44,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:44,402 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:56:44,402 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:56:44,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1137414017] [2021-11-20 05:56:44,403 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1137414017] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:56:44,403 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:56:44,403 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-20 05:56:44,404 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [261484327] [2021-11-20 05:56:44,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:56:44,405 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-20 05:56:44,405 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:56:44,406 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-20 05:56:44,406 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:56:44,406 INFO L87 Difference]: Start difference. First operand 666 states and 845 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 05:56:45,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:56:45,498 INFO L93 Difference]: Finished difference Result 1802 states and 2393 transitions. [2021-11-20 05:56:45,499 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-20 05:56:45,499 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2021-11-20 05:56:45,500 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:56:45,512 INFO L225 Difference]: With dead ends: 1802 [2021-11-20 05:56:45,513 INFO L226 Difference]: Without dead ends: 1281 [2021-11-20 05:56:45,518 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-11-20 05:56:45,520 INFO L933 BasicCegarLoop]: 148 mSDtfsCounter, 547 mSDsluCounter, 526 mSDsCounter, 0 mSdLazyCounter, 591 mSolverCounterSat, 188 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 555 SdHoareTripleChecker+Valid, 674 SdHoareTripleChecker+Invalid, 779 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 188 IncrementalHoareTripleChecker+Valid, 591 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-20 05:56:45,521 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [555 Valid, 674 Invalid, 779 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [188 Valid, 591 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-20 05:56:45,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1281 states. [2021-11-20 05:56:45,639 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1281 to 1020. [2021-11-20 05:56:45,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1020 states, 776 states have (on average 1.222938144329897) internal successors, (949), 827 states have internal predecessors, (949), 131 states have call successors, (131), 98 states have call predecessors, (131), 112 states have return successors, (203), 126 states have call predecessors, (203), 131 states have call successors, (203) [2021-11-20 05:56:45,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1020 states to 1020 states and 1283 transitions. [2021-11-20 05:56:45,652 INFO L78 Accepts]: Start accepts. Automaton has 1020 states and 1283 transitions. Word has length 55 [2021-11-20 05:56:45,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:56:45,653 INFO L470 AbstractCegarLoop]: Abstraction has 1020 states and 1283 transitions. [2021-11-20 05:56:45,654 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 05:56:45,654 INFO L276 IsEmpty]: Start isEmpty. Operand 1020 states and 1283 transitions. [2021-11-20 05:56:45,657 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2021-11-20 05:56:45,657 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:56:45,658 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:45,658 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 05:56:45,658 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:56:45,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:56:45,659 INFO L85 PathProgramCache]: Analyzing trace with hash 311034572, now seen corresponding path program 1 times [2021-11-20 05:56:45,659 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:56:45,659 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1668769321] [2021-11-20 05:56:45,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:45,660 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:56:45,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:45,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:56:45,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:45,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 05:56:45,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:45,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:56:45,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:45,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 05:56:45,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:45,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-11-20 05:56:45,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:45,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2021-11-20 05:56:45,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:45,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:56:45,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:45,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-11-20 05:56:45,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:45,947 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 17 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-11-20 05:56:45,947 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:56:45,947 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1668769321] [2021-11-20 05:56:45,948 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1668769321] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 05:56:45,948 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1734030461] [2021-11-20 05:56:45,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:56:45,948 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:56:45,949 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:56:45,951 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 05:56:45,971 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 05:56:46,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:56:46,125 INFO L263 TraceCheckSpWp]: Trace formula consists of 471 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 05:56:46,136 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 05:56:46,649 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 05:56:46,649 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 05:56:47,039 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-11-20 05:56:47,040 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1734030461] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 05:56:47,040 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 05:56:47,041 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-11-20 05:56:47,041 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [926822294] [2021-11-20 05:56:47,042 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 05:56:47,044 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-11-20 05:56:47,045 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:56:47,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-11-20 05:56:47,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-11-20 05:56:47,046 INFO L87 Difference]: Start difference. First operand 1020 states and 1283 transitions. Second operand has 16 states, 16 states have (on average 7.5) internal successors, (120), 11 states have internal predecessors, (120), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2021-11-20 05:56:48,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:56:48,439 INFO L93 Difference]: Finished difference Result 2169 states and 2814 transitions. [2021-11-20 05:56:48,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-11-20 05:56:48,441 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.5) internal successors, (120), 11 states have internal predecessors, (120), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 96 [2021-11-20 05:56:48,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:56:48,443 INFO L225 Difference]: With dead ends: 2169 [2021-11-20 05:56:48,443 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 05:56:48,452 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 215 SyntacticMatches, 1 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 393 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=301, Invalid=1421, Unknown=0, NotChecked=0, Total=1722 [2021-11-20 05:56:48,453 INFO L933 BasicCegarLoop]: 226 mSDtfsCounter, 416 mSDsluCounter, 1333 mSDsCounter, 0 mSdLazyCounter, 1120 mSolverCounterSat, 188 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 417 SdHoareTripleChecker+Valid, 1559 SdHoareTripleChecker+Invalid, 1308 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 188 IncrementalHoareTripleChecker+Valid, 1120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-11-20 05:56:48,454 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [417 Valid, 1559 Invalid, 1308 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [188 Valid, 1120 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-11-20 05:56:48,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 05:56:48,455 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 05:56:48,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 05:56:48,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 05:56:48,456 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2021-11-20 05:56:48,456 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:56:48,457 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 05:56:48,457 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.5) internal successors, (120), 11 states have internal predecessors, (120), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2021-11-20 05:56:48,457 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 05:56:48,458 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 05:56:48,461 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 05:56:48,515 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 05:56:48,678 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:56:48,680 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 05:56:55,850 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 160 167) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:56:55,851 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 160 167) no Hoare annotation was computed. [2021-11-20 05:56:55,851 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 160 167) no Hoare annotation was computed. [2021-11-20 05:56:55,851 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 93 99) no Hoare annotation was computed. [2021-11-20 05:56:55,851 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 93 99) the Hoare annotation is: true [2021-11-20 05:56:55,856 INFO L858 garLoopResultBuilder]: For program point L881-1(lines 877 888) no Hoare annotation was computed. [2021-11-20 05:56:55,856 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 877 888) the Hoare annotation is: true [2021-11-20 05:56:55,856 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 877 888) no Hoare annotation was computed. [2021-11-20 05:56:55,857 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 279 308) no Hoare annotation was computed. [2021-11-20 05:56:55,857 INFO L861 garLoopResultBuilder]: At program point L289-2(lines 289 303) the Hoare annotation is: true [2021-11-20 05:56:55,857 INFO L861 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: true [2021-11-20 05:56:55,857 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 279 308) the Hoare annotation is: true [2021-11-20 05:56:55,858 INFO L858 garLoopResultBuilder]: For program point L285-1(line 285) no Hoare annotation was computed. [2021-11-20 05:56:55,858 INFO L861 garLoopResultBuilder]: At program point L304(lines 279 308) the Hoare annotation is: true [2021-11-20 05:56:55,859 INFO L858 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2021-11-20 05:56:55,859 INFO L858 garLoopResultBuilder]: For program point L293(lines 293 297) no Hoare annotation was computed. [2021-11-20 05:56:55,859 INFO L861 garLoopResultBuilder]: At program point L293-1(lines 293 297) the Hoare annotation is: true [2021-11-20 05:56:55,859 INFO L858 garLoopResultBuilder]: For program point L290(line 290) no Hoare annotation was computed. [2021-11-20 05:56:55,859 INFO L858 garLoopResultBuilder]: For program point L857(lines 857 861) no Hoare annotation was computed. [2021-11-20 05:56:55,860 INFO L854 garLoopResultBuilder]: At program point L857-2(lines 853 864) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-20 05:56:55,861 INFO L854 garLoopResultBuilder]: At program point L977(line 977) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-11-20 05:56:55,861 INFO L858 garLoopResultBuilder]: For program point L977-1(line 977) no Hoare annotation was computed. [2021-11-20 05:56:55,861 INFO L858 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2021-11-20 05:56:55,861 INFO L858 garLoopResultBuilder]: For program point L73-2(lines 69 91) no Hoare annotation was computed. [2021-11-20 05:56:55,862 INFO L858 garLoopResultBuilder]: For program point L135(lines 135 143) no Hoare annotation was computed. [2021-11-20 05:56:55,862 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 66 92) no Hoare annotation was computed. [2021-11-20 05:56:55,862 INFO L858 garLoopResultBuilder]: For program point L131(lines 131 148) no Hoare annotation was computed. [2021-11-20 05:56:55,862 INFO L858 garLoopResultBuilder]: For program point L994(lines 994 1004) no Hoare annotation was computed. [2021-11-20 05:56:55,863 INFO L858 garLoopResultBuilder]: For program point L990(lines 990 1007) no Hoare annotation was computed. [2021-11-20 05:56:55,864 INFO L854 garLoopResultBuilder]: At program point L990-1(lines 982 1010) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not .cse5)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse2 (<= ~waterLevel~0 2))) (or .cse0 (and .cse1 .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse2 .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse8 (and .cse1 .cse9) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse9 .cse4) .cse6)) (or .cse8 (and (<= |timeShift_getWaterLevel_#res#1| 2) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse6 .cse10) (let ((.cse11 (= ~waterLevel~0 1))) (or (and .cse1 .cse11 .cse3 .cse4) .cse0 (and .cse7 .cse11 .cse3) .cse5 .cse6 .cse10))))) [2021-11-20 05:56:55,866 INFO L854 garLoopResultBuilder]: At program point L949(lines 944 952) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-20 05:56:55,866 INFO L858 garLoopResultBuilder]: For program point L995(lines 995 1001) no Hoare annotation was computed. [2021-11-20 05:56:55,866 INFO L858 garLoopResultBuilder]: For program point L958(line 958) no Hoare annotation was computed. [2021-11-20 05:56:55,867 INFO L858 garLoopResultBuilder]: For program point L252(lines 252 256) no Hoare annotation was computed. [2021-11-20 05:56:55,867 INFO L858 garLoopResultBuilder]: For program point L252-2(lines 252 256) no Hoare annotation was computed. [2021-11-20 05:56:55,867 INFO L854 garLoopResultBuilder]: At program point L979(lines 972 981) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse4) .cse3)))) [2021-11-20 05:56:55,867 INFO L854 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-20 05:56:55,868 INFO L854 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-20 05:56:55,868 INFO L854 garLoopResultBuilder]: At program point L992(line 992) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2) (let ((.cse5 (<= ~waterLevel~0 2))) (or .cse3 (and .cse4 .cse5 .cse6) .cse7 .cse1 (and .cse8 .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse3 (and .cse8 .cse9 .cse6) .cse7 .cse1 .cse2 (and .cse4 .cse9 .cse6))) (or .cse0 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2021-11-20 05:56:55,869 INFO L858 garLoopResultBuilder]: For program point L992-1(line 992) no Hoare annotation was computed. [2021-11-20 05:56:55,869 INFO L854 garLoopResultBuilder]: At program point L959(lines 954 961) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 .cse2 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse2 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-20 05:56:55,869 INFO L854 garLoopResultBuilder]: At program point L926(lines 921 929) the Hoare annotation is: (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse1 .cse2) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2 (not .cse3)) .cse4)) (let ((.cse6 (<= ~waterLevel~0 2))) (or .cse5 (and .cse1 .cse6 .cse7) .cse3 .cse4 (and .cse8 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse5 (and .cse8 .cse9 .cse7) .cse3 .cse4 .cse10 (and .cse1 .cse9 .cse7))) (or .cse0 .cse4 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse10))) [2021-11-20 05:56:55,869 INFO L854 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not .cse1)) .cse2))) [2021-11-20 05:56:55,870 INFO L854 garLoopResultBuilder]: At program point L146-1(lines 127 151) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (let ((.cse2 (<= ~waterLevel~0 2))) (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5 (and .cse6 .cse2 .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse7 (= ~waterLevel~0 1))) (or .cse0 (and .cse6 .cse7 .cse3) .cse4 .cse5 (not (<= 2 |old(~waterLevel~0)|)) (and .cse1 .cse7 .cse3))) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (not .cse4))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse8 .cse9) (and .cse1 .cse8 .cse9) .cse5)))) [2021-11-20 05:56:55,870 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 66 92) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-11-20 05:56:55,870 INFO L858 garLoopResultBuilder]: For program point L80-1(lines 80 86) no Hoare annotation was computed. [2021-11-20 05:56:55,871 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 66 92) no Hoare annotation was computed. [2021-11-20 05:56:55,871 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 958) no Hoare annotation was computed. [2021-11-20 05:56:55,871 INFO L854 garLoopResultBuilder]: At program point L258(lines 243 261) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-20 05:56:55,871 INFO L854 garLoopResultBuilder]: At program point L440(lines 391 441) the Hoare annotation is: false [2021-11-20 05:56:55,872 INFO L858 garLoopResultBuilder]: For program point L428(lines 428 434) no Hoare annotation was computed. [2021-11-20 05:56:55,873 INFO L854 garLoopResultBuilder]: At program point L428-2(lines 422 435) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2021-11-20 05:56:55,873 INFO L854 garLoopResultBuilder]: At program point L969(lines 964 971) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:56:55,873 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 05:56:55,873 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 05:56:55,873 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 05:56:55,874 INFO L858 garLoopResultBuilder]: For program point L412(lines 412 418) no Hoare annotation was computed. [2021-11-20 05:56:55,874 INFO L858 garLoopResultBuilder]: For program point L412-1(lines 412 418) no Hoare annotation was computed. [2021-11-20 05:56:55,874 INFO L854 garLoopResultBuilder]: At program point L437(lines 392 439) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2021-11-20 05:56:55,874 INFO L854 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2021-11-20 05:56:55,875 INFO L854 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2021-11-20 05:56:55,875 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 05:56:55,877 INFO L854 garLoopResultBuilder]: At program point L479(lines 474 482) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:56:55,877 INFO L854 garLoopResultBuilder]: At program point L471(lines 467 473) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:56:55,878 INFO L854 garLoopResultBuilder]: At program point L339(lines 335 341) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:56:55,878 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 375) no Hoare annotation was computed. [2021-11-20 05:56:55,878 INFO L858 garLoopResultBuilder]: For program point L368-2(lines 368 375) no Hoare annotation was computed. [2021-11-20 05:56:55,879 INFO L858 garLoopResultBuilder]: For program point L393(lines 392 439) no Hoare annotation was computed. [2021-11-20 05:56:55,879 INFO L858 garLoopResultBuilder]: For program point L422(lines 422 435) no Hoare annotation was computed. [2021-11-20 05:56:55,880 INFO L861 garLoopResultBuilder]: At program point L352(lines 344 354) the Hoare annotation is: true [2021-11-20 05:56:55,880 INFO L854 garLoopResultBuilder]: At program point L414(line 414) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2021-11-20 05:56:55,880 INFO L861 garLoopResultBuilder]: At program point L443(lines 382 447) the Hoare annotation is: true [2021-11-20 05:56:55,880 INFO L861 garLoopResultBuilder]: At program point L377(lines 358 380) the Hoare annotation is: true [2021-11-20 05:56:55,883 INFO L858 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2021-11-20 05:56:55,883 INFO L854 garLoopResultBuilder]: At program point L274(lines 262 276) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2)) [2021-11-20 05:56:55,884 INFO L858 garLoopResultBuilder]: For program point L402-1(lines 402 408) no Hoare annotation was computed. [2021-11-20 05:56:55,884 INFO L854 garLoopResultBuilder]: At program point L464(lines 460 466) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:56:55,884 INFO L858 garLoopResultBuilder]: For program point L394(lines 394 398) no Hoare annotation was computed. [2021-11-20 05:56:55,884 INFO L858 garLoopResultBuilder]: For program point L266(lines 266 272) no Hoare annotation was computed. [2021-11-20 05:56:55,885 INFO L858 garLoopResultBuilder]: For program point L266-1(lines 266 272) no Hoare annotation was computed. [2021-11-20 05:56:55,885 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 101 125) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-11-20 05:56:55,885 INFO L854 garLoopResultBuilder]: At program point L157(lines 152 159) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2021-11-20 05:56:55,885 INFO L854 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:56:55,886 INFO L858 garLoopResultBuilder]: For program point L120-1(lines 101 125) no Hoare annotation was computed. [2021-11-20 05:56:55,886 INFO L858 garLoopResultBuilder]: For program point L934(lines 934 940) no Hoare annotation was computed. [2021-11-20 05:56:55,886 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 101 125) no Hoare annotation was computed. [2021-11-20 05:56:55,886 INFO L854 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) .cse0 .cse1))) [2021-11-20 05:56:55,887 INFO L854 garLoopResultBuilder]: At program point L239(lines 224 242) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0)) .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2021-11-20 05:56:55,887 INFO L858 garLoopResultBuilder]: For program point L109(lines 109 117) no Hoare annotation was computed. [2021-11-20 05:56:55,887 INFO L854 garLoopResultBuilder]: At program point L939(lines 930 943) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse2 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2021-11-20 05:56:55,887 INFO L858 garLoopResultBuilder]: For program point L105(lines 105 122) no Hoare annotation was computed. [2021-11-20 05:56:55,888 INFO L858 garLoopResultBuilder]: For program point L233(lines 233 237) no Hoare annotation was computed. [2021-11-20 05:56:55,888 INFO L858 garLoopResultBuilder]: For program point L233-2(lines 233 237) no Hoare annotation was computed. [2021-11-20 05:56:55,889 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 865 876) no Hoare annotation was computed. [2021-11-20 05:56:55,889 INFO L858 garLoopResultBuilder]: For program point L869-1(lines 865 876) no Hoare annotation was computed. [2021-11-20 05:56:55,889 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 865 876) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse1 .cse3))) [2021-11-20 05:56:55,889 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 179 187) no Hoare annotation was computed. [2021-11-20 05:56:55,890 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 179 187) the Hoare annotation is: true [2021-11-20 05:56:55,890 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 179 187) no Hoare annotation was computed. [2021-11-20 05:56:55,894 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:56:55,896 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 05:56:55,972 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 05:56:55 BoogieIcfgContainer [2021-11-20 05:56:55,981 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 05:56:55,982 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 05:56:55,982 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 05:56:55,982 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 05:56:55,983 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:56:40" (3/4) ... [2021-11-20 05:56:55,986 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 05:56:55,994 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-20 05:56:55,994 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 05:56:55,995 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 05:56:55,995 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 05:56:55,995 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 05:56:55,996 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 05:56:55,996 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 05:56:55,996 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-20 05:56:56,006 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-11-20 05:56:56,007 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 05:56:56,008 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 05:56:56,009 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 05:56:56,010 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 05:56:56,011 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 05:56:56,011 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 05:56:56,040 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-11-20 05:56:56,040 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && tmp == 1) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 [2021-11-20 05:56:56,041 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && tmp == 1) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 [2021-11-20 05:56:56,041 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2)) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) [2021-11-20 05:56:56,042 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:56:56,043 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 05:56:56,044 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-20 05:56:56,044 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) [2021-11-20 05:56:56,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 05:56:56,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2 [2021-11-20 05:56:56,046 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) [2021-11-20 05:56:56,046 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 05:56:56,047 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2021-11-20 05:56:56,047 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 05:56:56,047 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (((!(tmp == 0) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2021-11-20 05:56:56,048 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-11-20 05:56:56,104 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 05:56:56,105 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 05:56:56,105 INFO L158 Benchmark]: Toolchain (without parser) took 17606.96ms. Allocated memory was 94.4MB in the beginning and 176.2MB in the end (delta: 81.8MB). Free memory was 59.0MB in the beginning and 108.3MB in the end (delta: -49.3MB). Peak memory consumption was 30.7MB. Max. memory is 16.1GB. [2021-11-20 05:56:56,106 INFO L158 Benchmark]: CDTParser took 0.39ms. Allocated memory is still 94.4MB. Free memory was 66.2MB in the beginning and 66.2MB in the end (delta: 28.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 05:56:56,107 INFO L158 Benchmark]: CACSL2BoogieTranslator took 731.71ms. Allocated memory was 94.4MB in the beginning and 142.6MB in the end (delta: 48.2MB). Free memory was 58.7MB in the beginning and 109.3MB in the end (delta: -50.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-20 05:56:56,107 INFO L158 Benchmark]: Boogie Procedure Inliner took 96.05ms. Allocated memory is still 142.6MB. Free memory was 109.3MB in the beginning and 106.4MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 05:56:56,108 INFO L158 Benchmark]: Boogie Preprocessor took 60.17ms. Allocated memory is still 142.6MB. Free memory was 106.4MB in the beginning and 105.2MB in the end (delta: 1.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 05:56:56,108 INFO L158 Benchmark]: RCFGBuilder took 715.94ms. Allocated memory is still 142.6MB. Free memory was 105.2MB in the beginning and 88.4MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-20 05:56:56,109 INFO L158 Benchmark]: TraceAbstraction took 15867.56ms. Allocated memory was 142.6MB in the beginning and 176.2MB in the end (delta: 33.6MB). Free memory was 88.4MB in the beginning and 115.6MB in the end (delta: -27.3MB). Peak memory consumption was 78.8MB. Max. memory is 16.1GB. [2021-11-20 05:56:56,110 INFO L158 Benchmark]: Witness Printer took 123.13ms. Allocated memory is still 176.2MB. Free memory was 115.6MB in the beginning and 108.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-20 05:56:56,113 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.39ms. Allocated memory is still 94.4MB. Free memory was 66.2MB in the beginning and 66.2MB in the end (delta: 28.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 731.71ms. Allocated memory was 94.4MB in the beginning and 142.6MB in the end (delta: 48.2MB). Free memory was 58.7MB in the beginning and 109.3MB in the end (delta: -50.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 96.05ms. Allocated memory is still 142.6MB. Free memory was 109.3MB in the beginning and 106.4MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 60.17ms. Allocated memory is still 142.6MB. Free memory was 106.4MB in the beginning and 105.2MB in the end (delta: 1.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 715.94ms. Allocated memory is still 142.6MB. Free memory was 105.2MB in the beginning and 88.4MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 15867.56ms. Allocated memory was 142.6MB in the beginning and 176.2MB in the end (delta: 33.6MB). Free memory was 88.4MB in the beginning and 115.6MB in the end (delta: -27.3MB). Peak memory consumption was 78.8MB. Max. memory is 16.1GB. * Witness Printer took 123.13ms. Allocated memory is still 176.2MB. Free memory was 115.6MB in the beginning and 108.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 958]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.7s, OverallIterations: 9, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 4.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1762 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1729 mSDsluCounter, 4828 SdHoareTripleChecker+Invalid, 2.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3628 mSDsCounter, 538 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2346 IncrementalHoareTripleChecker+Invalid, 2884 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 538 mSolverCounterUnsat, 1200 mSDtfsCounter, 2346 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 389 GetRequests, 279 SyntacticMatches, 1 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 687 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1020occurred in iteration=8, InterpolantAutomatonStates: 103, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 9 MinimizatonAttempts, 347 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 2128 PreInvPairs, 2701 NumberOfFragments, 1802 HoareAnnotationTreeSize, 2128 FomulaSimplifications, 6884 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 45 FomulaSimplificationsInter, 22650 FormulaSimplificationTreeSizeReductionInter, 5.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 553 NumberOfCodeBlocks, 553 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 638 ConstructedInterpolants, 0 QuantifiedInterpolants, 1310 SizeOfPredicates, 3 NumberOfNonLiveVariables, 471 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 11 InterpolantComputations, 8 PerfectInterpolantSequences, 97/123 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 344]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (((!(tmp == 0) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 262]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2 - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2)) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) - InvariantResult [Line: 279]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: (((((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 382]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && tmp == 1) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 358]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && tmp == 1) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 - InvariantResult [Line: 972]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-11-20 05:56:56,212 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_433e1bbc-3037-4366-97d3-b8e45a5846e5/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE