./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 29e70cf9c9b1d0bd005d907ed1d78af9dd0d19752a19f66dfee72f35dd243fc7 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 17:41:44,250 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 17:41:44,251 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 17:41:44,273 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 17:41:44,273 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 17:41:44,274 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 17:41:44,275 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 17:41:44,277 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 17:41:44,278 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 17:41:44,279 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 17:41:44,280 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 17:41:44,281 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 17:41:44,281 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 17:41:44,282 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 17:41:44,283 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 17:41:44,284 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 17:41:44,285 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 17:41:44,286 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 17:41:44,287 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 17:41:44,289 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 17:41:44,291 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 17:41:44,292 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 17:41:44,294 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 17:41:44,295 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 17:41:44,298 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 17:41:44,299 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 17:41:44,299 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 17:41:44,300 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 17:41:44,301 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 17:41:44,302 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 17:41:44,302 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 17:41:44,303 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 17:41:44,304 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 17:41:44,305 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 17:41:44,306 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 17:41:44,306 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 17:41:44,307 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 17:41:44,307 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 17:41:44,308 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 17:41:44,309 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 17:41:44,309 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 17:41:44,310 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 17:41:44,333 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 17:41:44,334 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 17:41:44,334 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 17:41:44,334 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 17:41:44,335 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 17:41:44,335 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 17:41:44,336 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 17:41:44,336 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 17:41:44,336 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 17:41:44,336 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 17:41:44,336 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 17:41:44,337 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 17:41:44,337 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 17:41:44,337 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 17:41:44,337 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 17:41:44,337 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 17:41:44,338 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 17:41:44,338 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 17:41:44,338 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 17:41:44,338 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 17:41:44,338 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 17:41:44,338 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 17:41:44,339 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 17:41:44,339 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 17:41:44,339 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 17:41:44,339 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 17:41:44,339 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 17:41:44,340 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 17:41:44,340 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 17:41:44,340 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 17:41:44,340 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 17:41:44,340 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 17:41:44,340 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 17:41:44,341 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 17:41:44,341 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 29e70cf9c9b1d0bd005d907ed1d78af9dd0d19752a19f66dfee72f35dd243fc7 [2021-12-06 17:41:44,530 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 17:41:44,549 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 17:41:44,551 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 17:41:44,551 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 17:41:44,552 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 17:41:44,553 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c [2021-12-06 17:41:44,595 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/data/9d4719cbb/224973aa2e7143c99ee3cc16f06ffe71/FLAGefc883c4c [2021-12-06 17:41:45,010 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 17:41:45,011 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c [2021-12-06 17:41:45,023 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/data/9d4719cbb/224973aa2e7143c99ee3cc16f06ffe71/FLAGefc883c4c [2021-12-06 17:41:45,033 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/data/9d4719cbb/224973aa2e7143c99ee3cc16f06ffe71 [2021-12-06 17:41:45,035 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 17:41:45,036 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 17:41:45,037 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 17:41:45,037 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 17:41:45,040 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 17:41:45,040 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,041 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@9ec62a2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45, skipping insertion in model container [2021-12-06 17:41:45,042 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,047 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 17:41:45,079 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 17:41:45,298 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c[17206,17219] [2021-12-06 17:41:45,304 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 17:41:45,312 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 17:41:45,379 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/sv-benchmarks/c/product-lines/minepump_spec3_product37.cil.c[17206,17219] [2021-12-06 17:41:45,382 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 17:41:45,399 INFO L208 MainTranslator]: Completed translation [2021-12-06 17:41:45,399 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45 WrapperNode [2021-12-06 17:41:45,399 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 17:41:45,400 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 17:41:45,400 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 17:41:45,400 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 17:41:45,405 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,419 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,445 INFO L137 Inliner]: procedures = 53, calls = 154, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 251 [2021-12-06 17:41:45,445 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 17:41:45,445 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 17:41:45,446 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 17:41:45,446 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 17:41:45,452 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,452 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,455 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,455 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,462 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,467 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,469 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,472 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 17:41:45,473 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 17:41:45,473 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 17:41:45,473 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 17:41:45,474 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (1/1) ... [2021-12-06 17:41:45,482 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 17:41:45,493 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 17:41:45,504 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 17:41:45,506 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 17:41:45,542 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 17:41:45,542 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 17:41:45,543 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 17:41:45,543 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-06 17:41:45,543 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-06 17:41:45,543 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 17:41:45,543 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 17:41:45,543 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 17:41:45,544 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 17:41:45,544 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 17:41:45,544 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 17:41:45,544 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 17:41:45,544 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 17:41:45,544 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 17:41:45,544 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 17:41:45,545 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 17:41:45,545 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 17:41:45,545 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 17:41:45,612 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 17:41:45,614 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 17:41:45,846 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 17:41:45,852 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 17:41:45,852 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 17:41:45,854 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 05:41:45 BoogieIcfgContainer [2021-12-06 17:41:45,854 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 17:41:45,855 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 17:41:45,855 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 17:41:45,858 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 17:41:45,858 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 05:41:45" (1/3) ... [2021-12-06 17:41:45,859 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3bb347b6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 05:41:45, skipping insertion in model container [2021-12-06 17:41:45,859 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 05:41:45" (2/3) ... [2021-12-06 17:41:45,859 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3bb347b6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 05:41:45, skipping insertion in model container [2021-12-06 17:41:45,859 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 05:41:45" (3/3) ... [2021-12-06 17:41:45,860 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product37.cil.c [2021-12-06 17:41:45,864 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 17:41:45,864 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 17:41:45,898 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 17:41:45,903 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 17:41:45,903 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 17:41:45,916 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 66 states have (on average 1.393939393939394) internal successors, (92), 74 states have internal predecessors, (92), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-12-06 17:41:45,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-06 17:41:45,922 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:45,922 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:45,922 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:45,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:45,926 INFO L85 PathProgramCache]: Analyzing trace with hash -817040355, now seen corresponding path program 1 times [2021-12-06 17:41:45,933 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:45,933 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [638377707] [2021-12-06 17:41:45,933 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:45,934 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:46,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 17:41:46,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,087 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:46,088 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:46,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [638377707] [2021-12-06 17:41:46,089 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [638377707] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:46,089 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:46,089 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 17:41:46,091 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107068046] [2021-12-06 17:41:46,091 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:46,095 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 17:41:46,095 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:46,120 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 17:41:46,121 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 17:41:46,123 INFO L87 Difference]: Start difference. First operand has 87 states, 66 states have (on average 1.393939393939394) internal successors, (92), 74 states have internal predecessors, (92), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 17:41:46,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:46,155 INFO L93 Difference]: Finished difference Result 166 states and 227 transitions. [2021-12-06 17:41:46,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 17:41:46,157 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-06 17:41:46,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:46,167 INFO L225 Difference]: With dead ends: 166 [2021-12-06 17:41:46,167 INFO L226 Difference]: Without dead ends: 78 [2021-12-06 17:41:46,171 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 17:41:46,175 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:46,176 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 17:41:46,193 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2021-12-06 17:41:46,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2021-12-06 17:41:46,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-06 17:41:46,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 101 transitions. [2021-12-06 17:41:46,221 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 101 transitions. Word has length 25 [2021-12-06 17:41:46,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:46,221 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 101 transitions. [2021-12-06 17:41:46,221 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 17:41:46,221 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 101 transitions. [2021-12-06 17:41:46,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-06 17:41:46,224 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:46,224 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:46,225 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 17:41:46,225 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:46,226 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:46,226 INFO L85 PathProgramCache]: Analyzing trace with hash -929835373, now seen corresponding path program 1 times [2021-12-06 17:41:46,226 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:46,226 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [846973544] [2021-12-06 17:41:46,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:46,227 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:46,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-06 17:41:46,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,300 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:46,300 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:46,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [846973544] [2021-12-06 17:41:46,301 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [846973544] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:46,301 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:46,301 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 17:41:46,301 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [560705623] [2021-12-06 17:41:46,301 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:46,302 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 17:41:46,302 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:46,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 17:41:46,303 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 17:41:46,303 INFO L87 Difference]: Start difference. First operand 78 states and 101 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 17:41:46,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:46,314 INFO L93 Difference]: Finished difference Result 122 states and 158 transitions. [2021-12-06 17:41:46,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 17:41:46,315 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-06 17:41:46,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:46,316 INFO L225 Difference]: With dead ends: 122 [2021-12-06 17:41:46,316 INFO L226 Difference]: Without dead ends: 69 [2021-12-06 17:41:46,317 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 17:41:46,318 INFO L933 BasicCegarLoop]: 88 mSDtfsCounter, 12 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 160 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:46,319 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 160 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 17:41:46,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2021-12-06 17:41:46,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2021-12-06 17:41:46,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 53 states have (on average 1.3396226415094339) internal successors, (71), 60 states have internal predecessors, (71), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-06 17:41:46,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 89 transitions. [2021-12-06 17:41:46,326 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 89 transitions. Word has length 26 [2021-12-06 17:41:46,326 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:46,326 INFO L470 AbstractCegarLoop]: Abstraction has 69 states and 89 transitions. [2021-12-06 17:41:46,327 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 17:41:46,327 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 89 transitions. [2021-12-06 17:41:46,328 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-06 17:41:46,328 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:46,328 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:46,328 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 17:41:46,328 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:46,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:46,329 INFO L85 PathProgramCache]: Analyzing trace with hash 1035191503, now seen corresponding path program 1 times [2021-12-06 17:41:46,329 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:46,329 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960664264] [2021-12-06 17:41:46,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:46,329 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:46,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 17:41:46,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,403 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:46,403 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:46,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960664264] [2021-12-06 17:41:46,404 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960664264] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:46,404 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:46,404 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:41:46,404 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [616671176] [2021-12-06 17:41:46,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:46,405 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:41:46,405 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:46,405 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:41:46,406 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:41:46,406 INFO L87 Difference]: Start difference. First operand 69 states and 89 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 17:41:46,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:46,478 INFO L93 Difference]: Finished difference Result 131 states and 172 transitions. [2021-12-06 17:41:46,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 17:41:46,478 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-06 17:41:46,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:46,479 INFO L225 Difference]: With dead ends: 131 [2021-12-06 17:41:46,480 INFO L226 Difference]: Without dead ends: 69 [2021-12-06 17:41:46,480 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 17:41:46,481 INFO L933 BasicCegarLoop]: 82 mSDtfsCounter, 171 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:46,482 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [171 Valid, 184 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 17:41:46,483 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2021-12-06 17:41:46,488 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2021-12-06 17:41:46,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 53 states have (on average 1.320754716981132) internal successors, (70), 60 states have internal predecessors, (70), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-06 17:41:46,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 88 transitions. [2021-12-06 17:41:46,490 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 88 transitions. Word has length 30 [2021-12-06 17:41:46,490 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:46,490 INFO L470 AbstractCegarLoop]: Abstraction has 69 states and 88 transitions. [2021-12-06 17:41:46,490 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 17:41:46,490 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 88 transitions. [2021-12-06 17:41:46,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2021-12-06 17:41:46,491 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:46,492 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:46,492 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 17:41:46,492 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:46,492 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:46,492 INFO L85 PathProgramCache]: Analyzing trace with hash -2104271006, now seen corresponding path program 1 times [2021-12-06 17:41:46,492 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:46,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1039520986] [2021-12-06 17:41:46,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:46,493 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:46,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 17:41:46,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 17:41:46,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-06 17:41:46,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,554 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:46,554 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:46,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1039520986] [2021-12-06 17:41:46,554 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1039520986] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:46,554 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:46,554 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 17:41:46,554 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431652085] [2021-12-06 17:41:46,555 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:46,555 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 17:41:46,555 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:46,555 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 17:41:46,555 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 17:41:46,556 INFO L87 Difference]: Start difference. First operand 69 states and 88 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-06 17:41:46,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:46,667 INFO L93 Difference]: Finished difference Result 208 states and 266 transitions. [2021-12-06 17:41:46,667 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 17:41:46,667 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2021-12-06 17:41:46,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:46,669 INFO L225 Difference]: With dead ends: 208 [2021-12-06 17:41:46,669 INFO L226 Difference]: Without dead ends: 146 [2021-12-06 17:41:46,670 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-06 17:41:46,671 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 167 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:46,671 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [169 Valid, 305 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 17:41:46,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2021-12-06 17:41:46,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 140. [2021-12-06 17:41:46,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 108 states have (on average 1.2777777777777777) internal successors, (138), 115 states have internal predecessors, (138), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2021-12-06 17:41:46,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 173 transitions. [2021-12-06 17:41:46,686 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 173 transitions. Word has length 40 [2021-12-06 17:41:46,686 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:46,686 INFO L470 AbstractCegarLoop]: Abstraction has 140 states and 173 transitions. [2021-12-06 17:41:46,686 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-06 17:41:46,686 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 173 transitions. [2021-12-06 17:41:46,687 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-12-06 17:41:46,687 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:46,688 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:46,688 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 17:41:46,688 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:46,688 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:46,688 INFO L85 PathProgramCache]: Analyzing trace with hash 1015544271, now seen corresponding path program 1 times [2021-12-06 17:41:46,688 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:46,688 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [400982027] [2021-12-06 17:41:46,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:46,689 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:46,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 17:41:46,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-06 17:41:46,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,747 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:46,747 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:46,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [400982027] [2021-12-06 17:41:46,748 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [400982027] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:46,748 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:46,748 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:41:46,748 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1099192622] [2021-12-06 17:41:46,749 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:46,749 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:41:46,749 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:46,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:41:46,750 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:41:46,750 INFO L87 Difference]: Start difference. First operand 140 states and 173 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 17:41:46,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:46,904 INFO L93 Difference]: Finished difference Result 392 states and 507 transitions. [2021-12-06 17:41:46,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-06 17:41:46,905 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2021-12-06 17:41:46,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:46,908 INFO L225 Difference]: With dead ends: 392 [2021-12-06 17:41:46,909 INFO L226 Difference]: Without dead ends: 259 [2021-12-06 17:41:46,911 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2021-12-06 17:41:46,912 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 157 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 400 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:46,913 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [163 Valid, 400 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 17:41:46,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2021-12-06 17:41:46,938 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 226. [2021-12-06 17:41:46,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 226 states, 175 states have (on average 1.28) internal successors, (224), 184 states have internal predecessors, (224), 25 states have call successors, (25), 23 states have call predecessors, (25), 25 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) [2021-12-06 17:41:46,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 226 states to 226 states and 284 transitions. [2021-12-06 17:41:46,941 INFO L78 Accepts]: Start accepts. Automaton has 226 states and 284 transitions. Word has length 44 [2021-12-06 17:41:46,942 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:46,942 INFO L470 AbstractCegarLoop]: Abstraction has 226 states and 284 transitions. [2021-12-06 17:41:46,942 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 17:41:46,942 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 284 transitions. [2021-12-06 17:41:46,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-12-06 17:41:46,944 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:46,945 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:46,945 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 17:41:46,945 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:46,945 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:46,946 INFO L85 PathProgramCache]: Analyzing trace with hash 796689553, now seen corresponding path program 1 times [2021-12-06 17:41:46,946 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:46,946 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1883808896] [2021-12-06 17:41:46,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:46,946 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:46,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:46,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 17:41:46,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-06 17:41:47,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,013 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:47,014 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:47,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1883808896] [2021-12-06 17:41:47,014 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1883808896] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:47,014 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:47,014 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:41:47,015 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [763331316] [2021-12-06 17:41:47,015 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:47,015 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:41:47,015 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:47,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:41:47,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:41:47,016 INFO L87 Difference]: Start difference. First operand 226 states and 284 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 17:41:47,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:47,110 INFO L93 Difference]: Finished difference Result 459 states and 584 transitions. [2021-12-06 17:41:47,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 17:41:47,111 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2021-12-06 17:41:47,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:47,114 INFO L225 Difference]: With dead ends: 459 [2021-12-06 17:41:47,114 INFO L226 Difference]: Without dead ends: 240 [2021-12-06 17:41:47,115 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 17:41:47,116 INFO L933 BasicCegarLoop]: 92 mSDtfsCounter, 59 mSDsluCounter, 281 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:47,116 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [62 Valid, 373 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 17:41:47,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2021-12-06 17:41:47,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 232. [2021-12-06 17:41:47,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 181 states have (on average 1.270718232044199) internal successors, (230), 190 states have internal predecessors, (230), 25 states have call successors, (25), 23 states have call predecessors, (25), 25 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) [2021-12-06 17:41:47,141 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 290 transitions. [2021-12-06 17:41:47,141 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 290 transitions. Word has length 44 [2021-12-06 17:41:47,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:47,142 INFO L470 AbstractCegarLoop]: Abstraction has 232 states and 290 transitions. [2021-12-06 17:41:47,142 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 17:41:47,142 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 290 transitions. [2021-12-06 17:41:47,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-12-06 17:41:47,144 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:47,144 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:47,144 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 17:41:47,144 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:47,145 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:47,145 INFO L85 PathProgramCache]: Analyzing trace with hash -20958897, now seen corresponding path program 1 times [2021-12-06 17:41:47,145 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:47,145 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [61327829] [2021-12-06 17:41:47,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:47,146 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:47,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 17:41:47,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-06 17:41:47,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,198 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:47,198 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:47,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [61327829] [2021-12-06 17:41:47,198 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [61327829] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:47,198 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:47,198 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 17:41:47,198 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [589172035] [2021-12-06 17:41:47,199 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:47,199 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 17:41:47,199 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:47,199 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 17:41:47,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 17:41:47,199 INFO L87 Difference]: Start difference. First operand 232 states and 290 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 6 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 17:41:47,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:47,285 INFO L93 Difference]: Finished difference Result 423 states and 534 transitions. [2021-12-06 17:41:47,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 17:41:47,286 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 6 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2021-12-06 17:41:47,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:47,287 INFO L225 Difference]: With dead ends: 423 [2021-12-06 17:41:47,288 INFO L226 Difference]: Without dead ends: 198 [2021-12-06 17:41:47,289 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-12-06 17:41:47,290 INFO L933 BasicCegarLoop]: 72 mSDtfsCounter, 93 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 132 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:47,290 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [97 Valid, 320 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 17:41:47,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2021-12-06 17:41:47,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 193. [2021-12-06 17:41:47,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 150 states have (on average 1.2466666666666666) internal successors, (187), 158 states have internal predecessors, (187), 21 states have call successors, (21), 19 states have call predecessors, (21), 21 states have return successors, (26), 21 states have call predecessors, (26), 21 states have call successors, (26) [2021-12-06 17:41:47,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 234 transitions. [2021-12-06 17:41:47,307 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 234 transitions. Word has length 44 [2021-12-06 17:41:47,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:47,307 INFO L470 AbstractCegarLoop]: Abstraction has 193 states and 234 transitions. [2021-12-06 17:41:47,307 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 6 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 17:41:47,307 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 234 transitions. [2021-12-06 17:41:47,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-06 17:41:47,309 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:47,309 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:47,309 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 17:41:47,309 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:47,309 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:47,310 INFO L85 PathProgramCache]: Analyzing trace with hash -766382886, now seen corresponding path program 1 times [2021-12-06 17:41:47,310 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:47,310 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1393664382] [2021-12-06 17:41:47,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:47,310 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:47,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 17:41:47,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:41:47,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-06 17:41:47,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,365 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:47,365 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:47,365 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1393664382] [2021-12-06 17:41:47,366 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1393664382] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:47,366 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:47,366 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 17:41:47,366 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1398176708] [2021-12-06 17:41:47,366 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:47,366 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 17:41:47,367 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:47,367 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 17:41:47,367 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 17:41:47,367 INFO L87 Difference]: Start difference. First operand 193 states and 234 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-06 17:41:47,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:47,477 INFO L93 Difference]: Finished difference Result 382 states and 463 transitions. [2021-12-06 17:41:47,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 17:41:47,477 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2021-12-06 17:41:47,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:47,478 INFO L225 Difference]: With dead ends: 382 [2021-12-06 17:41:47,478 INFO L226 Difference]: Without dead ends: 196 [2021-12-06 17:41:47,479 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-06 17:41:47,480 INFO L933 BasicCegarLoop]: 84 mSDtfsCounter, 108 mSDsluCounter, 257 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 341 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:47,480 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [113 Valid, 341 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 17:41:47,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 196 states. [2021-12-06 17:41:47,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 196 to 191. [2021-12-06 17:41:47,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 191 states, 148 states have (on average 1.2364864864864864) internal successors, (183), 156 states have internal predecessors, (183), 21 states have call successors, (21), 19 states have call predecessors, (21), 21 states have return successors, (26), 21 states have call predecessors, (26), 21 states have call successors, (26) [2021-12-06 17:41:47,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 230 transitions. [2021-12-06 17:41:47,491 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 230 transitions. Word has length 46 [2021-12-06 17:41:47,491 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:47,491 INFO L470 AbstractCegarLoop]: Abstraction has 191 states and 230 transitions. [2021-12-06 17:41:47,491 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-06 17:41:47,491 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 230 transitions. [2021-12-06 17:41:47,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2021-12-06 17:41:47,492 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:47,492 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:47,492 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 17:41:47,492 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:47,492 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:47,492 INFO L85 PathProgramCache]: Analyzing trace with hash 390915315, now seen corresponding path program 1 times [2021-12-06 17:41:47,492 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:47,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1155344194] [2021-12-06 17:41:47,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:47,493 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:47,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 17:41:47,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 17:41:47,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2021-12-06 17:41:47,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,556 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:47,556 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:47,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1155344194] [2021-12-06 17:41:47,557 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1155344194] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:47,557 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:47,557 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-06 17:41:47,557 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [728990633] [2021-12-06 17:41:47,557 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:47,558 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-06 17:41:47,558 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:47,558 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-06 17:41:47,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-06 17:41:47,558 INFO L87 Difference]: Start difference. First operand 191 states and 230 transitions. Second operand has 10 states, 10 states have (on average 4.1) internal successors, (41), 8 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-06 17:41:47,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:47,828 INFO L93 Difference]: Finished difference Result 388 states and 468 transitions. [2021-12-06 17:41:47,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2021-12-06 17:41:47,828 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 8 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2021-12-06 17:41:47,829 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:47,830 INFO L225 Difference]: With dead ends: 388 [2021-12-06 17:41:47,830 INFO L226 Difference]: Without dead ends: 250 [2021-12-06 17:41:47,831 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 75 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=128, Invalid=424, Unknown=0, NotChecked=0, Total=552 [2021-12-06 17:41:47,831 INFO L933 BasicCegarLoop]: 129 mSDtfsCounter, 296 mSDsluCounter, 452 mSDsCounter, 0 mSdLazyCounter, 409 mSolverCounterSat, 114 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 297 SdHoareTripleChecker+Valid, 581 SdHoareTripleChecker+Invalid, 523 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 114 IncrementalHoareTripleChecker+Valid, 409 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:47,832 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [297 Valid, 581 Invalid, 523 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [114 Valid, 409 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 17:41:47,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 250 states. [2021-12-06 17:41:47,841 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 250 to 193. [2021-12-06 17:41:47,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 149 states have (on average 1.2147651006711409) internal successors, (181), 158 states have internal predecessors, (181), 21 states have call successors, (21), 19 states have call predecessors, (21), 22 states have return successors, (25), 21 states have call predecessors, (25), 21 states have call successors, (25) [2021-12-06 17:41:47,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 227 transitions. [2021-12-06 17:41:47,843 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 227 transitions. Word has length 48 [2021-12-06 17:41:47,843 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:47,843 INFO L470 AbstractCegarLoop]: Abstraction has 193 states and 227 transitions. [2021-12-06 17:41:47,844 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.1) internal successors, (41), 8 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-06 17:41:47,844 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 227 transitions. [2021-12-06 17:41:47,844 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-06 17:41:47,844 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:47,845 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:47,845 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 17:41:47,845 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:47,845 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:47,845 INFO L85 PathProgramCache]: Analyzing trace with hash 126598332, now seen corresponding path program 1 times [2021-12-06 17:41:47,845 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:47,845 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1288863361] [2021-12-06 17:41:47,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:47,846 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:47,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 17:41:47,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 17:41:47,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:41:47,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-06 17:41:47,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:47,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:47,905 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:47,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1288863361] [2021-12-06 17:41:47,906 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1288863361] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:47,906 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:47,906 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 17:41:47,906 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [988127304] [2021-12-06 17:41:47,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:47,906 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 17:41:47,906 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:47,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 17:41:47,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-12-06 17:41:47,907 INFO L87 Difference]: Start difference. First operand 193 states and 227 transitions. Second operand has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 7 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 17:41:48,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:48,077 INFO L93 Difference]: Finished difference Result 372 states and 443 transitions. [2021-12-06 17:41:48,078 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-06 17:41:48,078 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 7 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2021-12-06 17:41:48,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:48,080 INFO L225 Difference]: With dead ends: 372 [2021-12-06 17:41:48,080 INFO L226 Difference]: Without dead ends: 232 [2021-12-06 17:41:48,081 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=156, Unknown=0, NotChecked=0, Total=210 [2021-12-06 17:41:48,081 INFO L933 BasicCegarLoop]: 72 mSDtfsCounter, 161 mSDsluCounter, 303 mSDsCounter, 0 mSdLazyCounter, 284 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 340 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 284 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:48,082 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [164 Valid, 375 Invalid, 340 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 284 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 17:41:48,083 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 232 states. [2021-12-06 17:41:48,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 232 to 193. [2021-12-06 17:41:48,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 149 states have (on average 1.2080536912751678) internal successors, (180), 158 states have internal predecessors, (180), 21 states have call successors, (21), 19 states have call predecessors, (21), 22 states have return successors, (25), 21 states have call predecessors, (25), 21 states have call successors, (25) [2021-12-06 17:41:48,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 226 transitions. [2021-12-06 17:41:48,098 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 226 transitions. Word has length 50 [2021-12-06 17:41:48,098 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:48,098 INFO L470 AbstractCegarLoop]: Abstraction has 193 states and 226 transitions. [2021-12-06 17:41:48,098 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 7 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 17:41:48,098 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 226 transitions. [2021-12-06 17:41:48,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-06 17:41:48,099 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:48,099 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:48,099 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-06 17:41:48,100 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:48,100 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:48,100 INFO L85 PathProgramCache]: Analyzing trace with hash 41757120, now seen corresponding path program 1 times [2021-12-06 17:41:48,100 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:48,100 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1035808998] [2021-12-06 17:41:48,101 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:48,101 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:48,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 17:41:48,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 17:41:48,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 17:41:48,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-06 17:41:48,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,171 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 17:41:48,171 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:48,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1035808998] [2021-12-06 17:41:48,171 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1035808998] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 17:41:48,172 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 17:41:48,172 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 17:41:48,172 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1458216264] [2021-12-06 17:41:48,172 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 17:41:48,172 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 17:41:48,172 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:48,173 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 17:41:48,173 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-06 17:41:48,173 INFO L87 Difference]: Start difference. First operand 193 states and 226 transitions. Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 17:41:48,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:48,407 INFO L93 Difference]: Finished difference Result 472 states and 578 transitions. [2021-12-06 17:41:48,407 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2021-12-06 17:41:48,407 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 50 [2021-12-06 17:41:48,407 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:48,412 INFO L225 Difference]: With dead ends: 472 [2021-12-06 17:41:48,412 INFO L226 Difference]: Without dead ends: 332 [2021-12-06 17:41:48,413 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=132, Invalid=330, Unknown=0, NotChecked=0, Total=462 [2021-12-06 17:41:48,414 INFO L933 BasicCegarLoop]: 78 mSDtfsCounter, 251 mSDsluCounter, 356 mSDsCounter, 0 mSdLazyCounter, 304 mSolverCounterSat, 87 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 256 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 391 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 87 IncrementalHoareTripleChecker+Valid, 304 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:48,414 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [256 Valid, 434 Invalid, 391 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [87 Valid, 304 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 17:41:48,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 332 states. [2021-12-06 17:41:48,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 332 to 303. [2021-12-06 17:41:48,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 233 states have (on average 1.1974248927038627) internal successors, (279), 247 states have internal predecessors, (279), 36 states have call successors, (36), 29 states have call predecessors, (36), 33 states have return successors, (46), 34 states have call predecessors, (46), 36 states have call successors, (46) [2021-12-06 17:41:48,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 361 transitions. [2021-12-06 17:41:48,431 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 361 transitions. Word has length 50 [2021-12-06 17:41:48,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:48,431 INFO L470 AbstractCegarLoop]: Abstraction has 303 states and 361 transitions. [2021-12-06 17:41:48,431 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 6 states have internal predecessors, (41), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 17:41:48,431 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 361 transitions. [2021-12-06 17:41:48,432 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2021-12-06 17:41:48,432 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 17:41:48,432 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:48,432 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-06 17:41:48,433 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 17:41:48,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 17:41:48,433 INFO L85 PathProgramCache]: Analyzing trace with hash -365727847, now seen corresponding path program 1 times [2021-12-06 17:41:48,433 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 17:41:48,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [249932192] [2021-12-06 17:41:48,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:48,433 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 17:41:48,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 17:41:48,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 17:41:48,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 17:41:48,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-06 17:41:48,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-06 17:41:48,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-06 17:41:48,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,508 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-12-06 17:41:48,508 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 17:41:48,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [249932192] [2021-12-06 17:41:48,508 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [249932192] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 17:41:48,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1171789046] [2021-12-06 17:41:48,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 17:41:48,509 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 17:41:48,509 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 17:41:48,510 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 17:41:48,511 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 17:41:48,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 17:41:48,574 INFO L263 TraceCheckSpWp]: Trace formula consists of 433 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-06 17:41:48,581 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 17:41:48,772 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-06 17:41:48,773 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 17:41:48,975 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-06 17:41:48,975 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1171789046] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 17:41:48,975 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 17:41:48,975 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 9] total 19 [2021-12-06 17:41:48,975 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [220516337] [2021-12-06 17:41:48,975 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 17:41:48,976 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2021-12-06 17:41:48,976 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 17:41:48,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2021-12-06 17:41:48,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=282, Unknown=0, NotChecked=0, Total=342 [2021-12-06 17:41:48,976 INFO L87 Difference]: Start difference. First operand 303 states and 361 transitions. Second operand has 19 states, 19 states have (on average 6.578947368421052) internal successors, (125), 14 states have internal predecessors, (125), 7 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 7 states have call successors, (18) [2021-12-06 17:41:49,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 17:41:49,843 INFO L93 Difference]: Finished difference Result 929 states and 1194 transitions. [2021-12-06 17:41:49,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2021-12-06 17:41:49,844 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 6.578947368421052) internal successors, (125), 14 states have internal predecessors, (125), 7 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 7 states have call successors, (18) Word has length 81 [2021-12-06 17:41:49,844 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 17:41:49,844 INFO L225 Difference]: With dead ends: 929 [2021-12-06 17:41:49,844 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 17:41:49,847 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 237 GetRequests, 169 SyntacticMatches, 1 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1203 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=927, Invalid=3765, Unknown=0, NotChecked=0, Total=4692 [2021-12-06 17:41:49,848 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 1062 mSDsluCounter, 554 mSDsCounter, 0 mSdLazyCounter, 1007 mSolverCounterSat, 521 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1062 SdHoareTripleChecker+Valid, 660 SdHoareTripleChecker+Invalid, 1528 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 521 IncrementalHoareTripleChecker+Valid, 1007 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 17:41:49,848 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1062 Valid, 660 Invalid, 1528 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [521 Valid, 1007 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 17:41:49,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 17:41:49,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 17:41:49,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 17:41:49,849 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 17:41:49,849 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 81 [2021-12-06 17:41:49,849 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 17:41:49,849 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 17:41:49,850 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 6.578947368421052) internal successors, (125), 14 states have internal predecessors, (125), 7 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 7 states have call successors, (18) [2021-12-06 17:41:49,850 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 17:41:49,850 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 17:41:49,852 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 17:41:49,874 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 17:41:50,052 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 17:41:50,054 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 17:41:52,939 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 555 561) no Hoare annotation was computed. [2021-12-06 17:41:52,939 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 555 561) the Hoare annotation is: true [2021-12-06 17:41:52,939 INFO L858 garLoopResultBuilder]: For program point L802-1(lines 798 809) no Hoare annotation was computed. [2021-12-06 17:41:52,939 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 798 809) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse0 (not .cse6)) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not .cse1)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse2 .cse6 .cse7 .cse3 .cse4) (or .cse5 .cse2 .cse6 .cse7 .cse4)))) [2021-12-06 17:41:52,939 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 798 809) no Hoare annotation was computed. [2021-12-06 17:41:52,939 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 810 818) the Hoare annotation is: true [2021-12-06 17:41:52,939 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 810 818) no Hoare annotation was computed. [2021-12-06 17:41:52,939 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 810 818) no Hoare annotation was computed. [2021-12-06 17:41:52,939 INFO L858 garLoopResultBuilder]: For program point L894(lines 894 900) no Hoare annotation was computed. [2021-12-06 17:41:52,939 INFO L858 garLoopResultBuilder]: For program point L890(lines 890 903) no Hoare annotation was computed. [2021-12-06 17:41:52,940 INFO L854 garLoopResultBuilder]: At program point L890-1(lines 875 907) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse9 (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 1) (<= |timeShift_getWaterLevel_#res#1| 1))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not .cse14)) (.cse11 (and (<= 1 ~pumpRunning~0) .cse14 .cse13 .cse3)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (and .cse6 .cse0 .cse1 .cse13 .cse3))) (and (let ((.cse2 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 (and .cse6 .cse1 .cse2 .cse3) .cse7)) (or .cse8 .cse4 .cse9 .cse10 .cse11 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse4 .cse12) (or .cse4 .cse9 .cse5 .cse10 .cse7) (or .cse8 .cse4 .cse11 .cse7 .cse12)))) [2021-12-06 17:41:52,940 INFO L858 garLoopResultBuilder]: For program point L535-1(lines 534 553) no Hoare annotation was computed. [2021-12-06 17:41:52,940 INFO L858 garLoopResultBuilder]: For program point L597(lines 597 605) no Hoare annotation was computed. [2021-12-06 17:41:52,940 INFO L854 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (and .cse1 .cse4 .cse2 .cse8)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse4 .cse2 .cse3) .cse5)) (or .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse0) (or .cse6 .cse7 .cse0 (and (<= 1 ~pumpRunning~0) .cse8) .cse5)))) [2021-12-06 17:41:52,940 INFO L858 garLoopResultBuilder]: For program point L593(lines 593 610) no Hoare annotation was computed. [2021-12-06 17:41:52,940 INFO L858 garLoopResultBuilder]: For program point L882-1(line 882) no Hoare annotation was computed. [2021-12-06 17:41:52,940 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 531 554) no Hoare annotation was computed. [2021-12-06 17:41:52,940 INFO L858 garLoopResultBuilder]: For program point L870(line 870) no Hoare annotation was computed. [2021-12-06 17:41:52,940 INFO L854 garLoopResultBuilder]: At program point L635(line 635) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 17:41:52,940 INFO L858 garLoopResultBuilder]: For program point L635-1(line 635) no Hoare annotation was computed. [2021-12-06 17:41:52,940 INFO L854 garLoopResultBuilder]: At program point L627(lines 622 629) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 17:41:52,941 INFO L854 garLoopResultBuilder]: At program point L871(lines 866 873) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 17:41:52,941 INFO L854 garLoopResultBuilder]: At program point L603(line 603) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 17:41:52,941 INFO L858 garLoopResultBuilder]: For program point L884(lines 884 904) no Hoare annotation was computed. [2021-12-06 17:41:52,941 INFO L854 garLoopResultBuilder]: At program point L847(lines 842 850) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse12 (= 1 ~systemActive~0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|)) (.cse8 (<= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and .cse4 .cse9 .cse5 .cse12 .cse11 .cse7 .cse8)) (.cse2 (not .cse12)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse4 .cse1 .cse5 .cse6 .cse7 .cse8) .cse2 (and .cse9 .cse1 .cse5 .cse6 .cse7 .cse8) (not (<= 1 |old(~pumpRunning~0)|)) .cse3)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse10 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse0 .cse10 .cse2 (and (<= 1 ~pumpRunning~0) .cse11 .cse7) .cse3)))) [2021-12-06 17:41:52,941 INFO L854 garLoopResultBuilder]: At program point L608(line 608) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1))) [2021-12-06 17:41:52,941 INFO L854 garLoopResultBuilder]: At program point L608-1(lines 589 613) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (and .cse1 .cse4 .cse2 .cse8)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse4 .cse2 .cse3) .cse5)) (or .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse0) (or .cse6 .cse7 .cse0 (and (<= 1 ~pumpRunning~0) .cse8) .cse5)))) [2021-12-06 17:41:52,941 INFO L854 garLoopResultBuilder]: At program point L637(lines 630 640) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 17:41:52,941 INFO L858 garLoopResultBuilder]: For program point L542-1(lines 542 548) no Hoare annotation was computed. [2021-12-06 17:41:52,941 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 531 554) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2021-12-06 17:41:52,941 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 531 554) no Hoare annotation was computed. [2021-12-06 17:41:52,941 INFO L858 garLoopResultBuilder]: For program point L778(lines 778 782) no Hoare annotation was computed. [2021-12-06 17:41:52,942 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 870) no Hoare annotation was computed. [2021-12-06 17:41:52,942 INFO L854 garLoopResultBuilder]: At program point L778-2(lines 774 785) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 17:41:52,942 INFO L854 garLoopResultBuilder]: At program point L646(lines 641 649) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1) (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|)) .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2021-12-06 17:41:52,942 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-06 17:41:52,942 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-06 17:41:52,942 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-06 17:41:52,942 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-06 17:41:52,942 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-06 17:41:52,942 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-06 17:41:52,942 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-06 17:41:52,942 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-06 17:41:52,942 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-06 17:41:52,942 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-06 17:41:52,942 INFO L854 garLoopResultBuilder]: At program point L762(lines 715 763) the Hoare annotation is: false [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point L717(lines 716 761) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point L746(lines 746 757) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L854 garLoopResultBuilder]: At program point L738(line 738) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L854 garLoopResultBuilder]: At program point L924(lines 920 926) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 17:41:52,943 INFO L854 garLoopResultBuilder]: At program point L759(lines 716 761) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3))) [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point L726(lines 726 732) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point L726-1(lines 726 732) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point L718(lines 718 722) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 17:41:52,943 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2021-12-06 17:41:52,944 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2021-12-06 17:41:52,944 INFO L858 garLoopResultBuilder]: For program point L752(lines 752 756) no Hoare annotation was computed. [2021-12-06 17:41:52,944 INFO L854 garLoopResultBuilder]: At program point L752-2(lines 746 757) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2021-12-06 17:41:52,944 INFO L858 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2021-12-06 17:41:52,944 INFO L858 garLoopResultBuilder]: For program point L736-1(lines 736 742) no Hoare annotation was computed. [2021-12-06 17:41:52,944 INFO L861 garLoopResultBuilder]: At program point L765(lines 706 769) the Hoare annotation is: true [2021-12-06 17:41:52,944 INFO L854 garLoopResultBuilder]: At program point L728(line 728) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3))) [2021-12-06 17:41:52,944 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 17:41:52,944 INFO L854 garLoopResultBuilder]: At program point L939(lines 934 942) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 17:41:52,944 INFO L854 garLoopResultBuilder]: At program point L931(lines 927 933) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 17:41:52,944 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 563 587) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2021-12-06 17:41:52,944 INFO L858 garLoopResultBuilder]: For program point L855(lines 855 861) no Hoare annotation was computed. [2021-12-06 17:41:52,945 INFO L854 garLoopResultBuilder]: At program point L577(line 577) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0) .cse2)) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse2)) (or (not (= ~waterLevel~0 1)) .cse0 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|)) .cse1))) [2021-12-06 17:41:52,945 INFO L854 garLoopResultBuilder]: At program point L701(lines 686 704) the Hoare annotation is: (let ((.cse6 (= ~methaneLevelCritical~0 0))) (let ((.cse12 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= ~pumpRunning~0 0)) (.cse13 (<= ~waterLevel~0 1)) (.cse9 (= 1 ~systemActive~0)) (.cse4 (not .cse6)) (.cse14 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse15 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) (.cse16 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|))) (let ((.cse7 (and .cse12 .cse10 .cse11 .cse13 .cse9 .cse4 .cse14 .cse15 .cse16)) (.cse1 (not .cse13)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and .cse12 .cse10 .cse11 .cse6 .cse13 .cse9 .cse14 .cse15 .cse16)) (.cse5 (and .cse10 .cse11 .cse9 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|))) (.cse0 (not .cse9)) (.cse8 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse4 .cse1) (or .cse2 .cse5 .cse6 .cse0 .cse7 .cse8) (or .cse2 .cse6 .cse0 .cse7 .cse1) (or .cse2 .cse3 .cse5 .cse0 .cse4 .cse8))))) [2021-12-06 17:41:52,945 INFO L854 garLoopResultBuilder]: At program point L860(lines 851 864) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1))) (let ((.cse1 (not .cse5)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse4 .cse5))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 (and .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse3)))) [2021-12-06 17:41:52,945 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 563 587) no Hoare annotation was computed. [2021-12-06 17:41:52,945 INFO L858 garLoopResultBuilder]: For program point L571(lines 571 579) no Hoare annotation was computed. [2021-12-06 17:41:52,945 INFO L858 garLoopResultBuilder]: For program point L567(lines 567 584) no Hoare annotation was computed. [2021-12-06 17:41:52,945 INFO L858 garLoopResultBuilder]: For program point L695(lines 695 699) no Hoare annotation was computed. [2021-12-06 17:41:52,945 INFO L858 garLoopResultBuilder]: For program point L695-2(lines 695 699) no Hoare annotation was computed. [2021-12-06 17:41:52,945 INFO L854 garLoopResultBuilder]: At program point L619(lines 614 621) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (and (<= 1 ~pumpRunning~0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|)) (not (<= ~waterLevel~0 2))) (or .cse2 .cse0 .cse1))) [2021-12-06 17:41:52,945 INFO L854 garLoopResultBuilder]: At program point L582(line 582) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-06 17:41:52,945 INFO L858 garLoopResultBuilder]: For program point L582-1(lines 563 587) no Hoare annotation was computed. [2021-12-06 17:41:52,945 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 786 797) no Hoare annotation was computed. [2021-12-06 17:41:52,945 INFO L858 garLoopResultBuilder]: For program point L790-1(lines 786 797) no Hoare annotation was computed. [2021-12-06 17:41:52,946 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 786 797) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 (not (<= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2021-12-06 17:41:52,948 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 17:41:52,949 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 17:41:52,972 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 05:41:52 BoogieIcfgContainer [2021-12-06 17:41:52,972 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 17:41:52,972 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 17:41:52,972 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 17:41:52,972 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 17:41:52,973 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 05:41:45" (3/4) ... [2021-12-06 17:41:52,975 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 17:41:52,979 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 17:41:52,979 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 17:41:52,979 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-06 17:41:52,979 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 17:41:52,979 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 17:41:52,980 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 17:41:52,980 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 17:41:52,986 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-12-06 17:41:52,986 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 17:41:52,986 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 17:41:52,987 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 17:41:52,987 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 17:41:52,988 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 17:41:52,988 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 17:41:53,004 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-12-06 17:41:53,005 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-12-06 17:41:53,005 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && tmp == 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((((pumpRunning == 0 && tmp == 1) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) [2021-12-06 17:41:53,005 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-06 17:41:53,006 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2021-12-06 17:41:53,006 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((((!(1 == systemActive) || (tmp___0 <= 1 && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) [2021-12-06 17:41:53,007 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-06 17:41:53,007 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1) || !(1 == systemActive)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp) && \result <= 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp) && \result <= 1)) || !(1 == systemActive)) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) [2021-12-06 17:41:53,007 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-06 17:41:53,007 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) [2021-12-06 17:41:53,007 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && !(\result == 0)) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) [2021-12-06 17:41:53,007 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || ((((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) [2021-12-06 17:41:53,008 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2021-12-06 17:41:53,008 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-06 17:41:53,032 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 17:41:53,032 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 17:41:53,033 INFO L158 Benchmark]: Toolchain (without parser) took 7997.07ms. Allocated memory was 104.9MB in the beginning and 125.8MB in the end (delta: 21.0MB). Free memory was 67.5MB in the beginning and 62.0MB in the end (delta: 5.5MB). Peak memory consumption was 26.3MB. Max. memory is 16.1GB. [2021-12-06 17:41:53,033 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 104.9MB. Free memory is still 84.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 17:41:53,033 INFO L158 Benchmark]: CACSL2BoogieTranslator took 362.18ms. Allocated memory is still 104.9MB. Free memory was 67.3MB in the beginning and 70.7MB in the end (delta: -3.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-06 17:41:53,034 INFO L158 Benchmark]: Boogie Procedure Inliner took 45.07ms. Allocated memory is still 104.9MB. Free memory was 70.7MB in the beginning and 68.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 17:41:53,034 INFO L158 Benchmark]: Boogie Preprocessor took 26.76ms. Allocated memory is still 104.9MB. Free memory was 68.2MB in the beginning and 66.9MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 17:41:53,035 INFO L158 Benchmark]: RCFGBuilder took 381.18ms. Allocated memory is still 104.9MB. Free memory was 66.5MB in the beginning and 50.6MB in the end (delta: 15.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-06 17:41:53,035 INFO L158 Benchmark]: TraceAbstraction took 7116.53ms. Allocated memory was 104.9MB in the beginning and 125.8MB in the end (delta: 21.0MB). Free memory was 50.1MB in the beginning and 68.3MB in the end (delta: -18.1MB). Peak memory consumption was 46.3MB. Max. memory is 16.1GB. [2021-12-06 17:41:53,035 INFO L158 Benchmark]: Witness Printer took 60.25ms. Allocated memory is still 125.8MB. Free memory was 68.3MB in the beginning and 62.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-06 17:41:53,037 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 104.9MB. Free memory is still 84.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 362.18ms. Allocated memory is still 104.9MB. Free memory was 67.3MB in the beginning and 70.7MB in the end (delta: -3.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 45.07ms. Allocated memory is still 104.9MB. Free memory was 70.7MB in the beginning and 68.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 26.76ms. Allocated memory is still 104.9MB. Free memory was 68.2MB in the beginning and 66.9MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 381.18ms. Allocated memory is still 104.9MB. Free memory was 66.5MB in the beginning and 50.6MB in the end (delta: 15.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 7116.53ms. Allocated memory was 104.9MB in the beginning and 125.8MB in the end (delta: 21.0MB). Free memory was 50.1MB in the beginning and 68.3MB in the end (delta: -18.1MB). Peak memory consumption was 46.3MB. Max. memory is 16.1GB. * Witness Printer took 60.25ms. Allocated memory is still 125.8MB. Free memory was 68.3MB in the beginning and 62.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 870]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.1s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2569 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2537 mSDsluCounter, 4243 SdHoareTripleChecker+Invalid, 1.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3089 mSDsCounter, 958 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2650 IncrementalHoareTripleChecker+Invalid, 3608 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 958 mSolverCounterUnsat, 1154 mSDtfsCounter, 2650 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 425 GetRequests, 255 SyntacticMatches, 1 SemanticMatches, 169 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1401 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=303occurred in iteration=11, InterpolantAutomatonStates: 153, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 182 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 1075 PreInvPairs, 1325 NumberOfFragments, 1687 HoareAnnotationTreeSize, 1075 FomulaSimplifications, 198 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 40 FomulaSimplificationsInter, 22057 FormulaSimplificationTreeSizeReductionInter, 2.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 609 NumberOfCodeBlocks, 609 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 676 ConstructedInterpolants, 0 QuantifiedInterpolants, 1352 SizeOfPredicates, 4 NumberOfNonLiveVariables, 433 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 58/78 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 875]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((((!(1 == systemActive) || (tmp___0 <= 1 && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) - InvariantResult [Line: 641]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && !(\result == 0)) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && tmp == 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((((pumpRunning == 0 && tmp == 1) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 614]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) - InvariantResult [Line: 715]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 842]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1) || !(1 == systemActive)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp) && \result <= 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp) && \result <= 1)) || !(1 == systemActive)) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 622]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 686]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || ((((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || ((((((((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && 1 <= tmp)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && 1 <= \result) && 1 <= tmp___0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-12-06 17:41:53,086 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4f68fe79-c2e6-4940-b9d5-e0c4be3bd473/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE