./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7573d0f26b9c64760f56bc1038037f99fa78fd69add5234955c16ce4082df45a --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 22:35:22,519 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 22:35:22,520 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 22:35:22,551 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 22:35:22,551 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 22:35:22,553 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 22:35:22,554 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 22:35:22,557 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 22:35:22,559 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 22:35:22,560 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 22:35:22,561 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 22:35:22,563 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 22:35:22,563 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 22:35:22,564 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 22:35:22,566 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 22:35:22,567 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 22:35:22,568 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 22:35:22,569 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 22:35:22,572 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 22:35:22,574 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 22:35:22,576 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 22:35:22,578 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 22:35:22,579 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 22:35:22,580 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 22:35:22,584 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 22:35:22,584 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 22:35:22,585 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 22:35:22,586 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 22:35:22,586 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 22:35:22,587 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 22:35:22,588 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 22:35:22,589 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 22:35:22,589 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 22:35:22,590 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 22:35:22,591 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 22:35:22,591 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 22:35:22,592 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 22:35:22,592 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 22:35:22,593 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 22:35:22,593 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 22:35:22,594 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 22:35:22,595 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 22:35:22,618 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 22:35:22,618 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 22:35:22,619 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 22:35:22,619 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 22:35:22,619 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 22:35:22,620 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 22:35:22,620 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 22:35:22,621 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 22:35:22,621 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 22:35:22,621 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 22:35:22,621 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 22:35:22,621 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 22:35:22,622 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 22:35:22,622 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 22:35:22,622 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 22:35:22,622 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 22:35:22,622 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 22:35:22,623 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 22:35:22,623 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 22:35:22,623 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 22:35:22,623 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 22:35:22,623 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 22:35:22,624 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 22:35:22,624 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 22:35:22,624 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:35:22,624 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 22:35:22,624 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 22:35:22,625 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 22:35:22,625 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 22:35:22,625 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 22:35:22,625 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 22:35:22,625 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 22:35:22,626 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 22:35:22,626 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 22:35:22,626 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7573d0f26b9c64760f56bc1038037f99fa78fd69add5234955c16ce4082df45a [2021-12-06 22:35:22,795 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 22:35:22,815 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 22:35:22,817 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 22:35:22,818 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 22:35:22,819 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 22:35:22,820 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c [2021-12-06 22:35:22,871 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/data/17506579f/1bba9d3a87044452ad9c4c4a0d0e6187/FLAG3e3676ae7 [2021-12-06 22:35:23,282 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 22:35:23,283 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c [2021-12-06 22:35:23,290 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/data/17506579f/1bba9d3a87044452ad9c4c4a0d0e6187/FLAG3e3676ae7 [2021-12-06 22:35:23,299 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/data/17506579f/1bba9d3a87044452ad9c4c4a0d0e6187 [2021-12-06 22:35:23,301 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 22:35:23,302 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 22:35:23,303 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 22:35:23,303 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 22:35:23,306 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 22:35:23,306 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,307 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@49571bf8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23, skipping insertion in model container [2021-12-06 22:35:23,307 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,312 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 22:35:23,338 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:35:23,532 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c[18691,18704] [2021-12-06 22:35:23,534 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:35:23,541 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 22:35:23,591 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c[18691,18704] [2021-12-06 22:35:23,592 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:35:23,605 INFO L208 MainTranslator]: Completed translation [2021-12-06 22:35:23,605 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23 WrapperNode [2021-12-06 22:35:23,605 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 22:35:23,606 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 22:35:23,606 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 22:35:23,606 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 22:35:23,612 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,627 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,655 INFO L137 Inliner]: procedures = 56, calls = 156, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 280 [2021-12-06 22:35:23,655 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 22:35:23,656 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 22:35:23,656 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 22:35:23,656 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 22:35:23,664 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,664 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,666 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,666 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,671 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,675 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,676 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,679 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 22:35:23,679 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 22:35:23,679 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 22:35:23,679 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 22:35:23,680 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (1/1) ... [2021-12-06 22:35:23,687 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:35:23,698 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:35:23,708 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 22:35:23,710 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 22:35:23,745 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 22:35:23,745 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 22:35:23,746 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 22:35:23,746 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 22:35:23,746 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 22:35:23,746 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 22:35:23,746 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 22:35:23,746 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 22:35:23,746 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 22:35:23,746 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 22:35:23,747 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 22:35:23,747 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 22:35:23,747 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 22:35:23,747 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 22:35:23,747 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 22:35:23,747 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 22:35:23,813 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 22:35:23,815 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 22:35:24,073 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 22:35:24,079 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 22:35:24,079 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 22:35:24,081 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:35:24 BoogieIcfgContainer [2021-12-06 22:35:24,081 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 22:35:24,082 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 22:35:24,082 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 22:35:24,085 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 22:35:24,085 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 10:35:23" (1/3) ... [2021-12-06 22:35:24,085 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7e1d5939 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:35:24, skipping insertion in model container [2021-12-06 22:35:24,085 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:35:23" (2/3) ... [2021-12-06 22:35:24,086 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7e1d5939 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:35:24, skipping insertion in model container [2021-12-06 22:35:24,086 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:35:24" (3/3) ... [2021-12-06 22:35:24,087 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product57.cil.c [2021-12-06 22:35:24,095 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 22:35:24,096 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 22:35:24,133 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 22:35:24,139 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 22:35:24,139 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 22:35:24,154 INFO L276 IsEmpty]: Start isEmpty. Operand has 86 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2021-12-06 22:35:24,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-12-06 22:35:24,160 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:24,160 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:24,161 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:24,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:24,166 INFO L85 PathProgramCache]: Analyzing trace with hash -1290449034, now seen corresponding path program 1 times [2021-12-06 22:35:24,173 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:24,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [672139259] [2021-12-06 22:35:24,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:24,174 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:24,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:24,318 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:24,318 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:24,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [672139259] [2021-12-06 22:35:24,319 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [672139259] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:24,319 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:35:24,319 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:35:24,321 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1470279426] [2021-12-06 22:35:24,321 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:24,325 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 22:35:24,325 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:24,345 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 22:35:24,346 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:35:24,348 INFO L87 Difference]: Start difference. First operand has 86 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:35:24,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:24,373 INFO L93 Difference]: Finished difference Result 164 states and 225 transitions. [2021-12-06 22:35:24,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 22:35:24,375 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-12-06 22:35:24,375 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:24,385 INFO L225 Difference]: With dead ends: 164 [2021-12-06 22:35:24,385 INFO L226 Difference]: Without dead ends: 77 [2021-12-06 22:35:24,389 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:35:24,393 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:24,394 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:35:24,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2021-12-06 22:35:24,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2021-12-06 22:35:24,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 68 states have internal predecessors, (81), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-06 22:35:24,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 100 transitions. [2021-12-06 22:35:24,438 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 100 transitions. Word has length 19 [2021-12-06 22:35:24,438 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:24,438 INFO L470 AbstractCegarLoop]: Abstraction has 77 states and 100 transitions. [2021-12-06 22:35:24,439 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:35:24,439 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 100 transitions. [2021-12-06 22:35:24,441 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2021-12-06 22:35:24,441 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:24,442 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:24,442 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 22:35:24,442 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:24,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:24,443 INFO L85 PathProgramCache]: Analyzing trace with hash -1967581778, now seen corresponding path program 1 times [2021-12-06 22:35:24,443 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:24,444 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747564040] [2021-12-06 22:35:24,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:24,444 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:24,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:24,511 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:24,512 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:24,512 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747564040] [2021-12-06 22:35:24,512 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747564040] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:24,512 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:35:24,512 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:35:24,512 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [459453321] [2021-12-06 22:35:24,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:24,513 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:35:24,513 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:24,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:35:24,514 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:35:24,514 INFO L87 Difference]: Start difference. First operand 77 states and 100 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:35:24,526 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:24,526 INFO L93 Difference]: Finished difference Result 120 states and 156 transitions. [2021-12-06 22:35:24,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:35:24,527 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2021-12-06 22:35:24,527 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:24,528 INFO L225 Difference]: With dead ends: 120 [2021-12-06 22:35:24,528 INFO L226 Difference]: Without dead ends: 68 [2021-12-06 22:35:24,529 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:35:24,530 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 12 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:24,530 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 158 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:35:24,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2021-12-06 22:35:24,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2021-12-06 22:35:24,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 62 states have internal predecessors, (74), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-12-06 22:35:24,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 88 transitions. [2021-12-06 22:35:24,539 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 88 transitions. Word has length 20 [2021-12-06 22:35:24,539 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:24,539 INFO L470 AbstractCegarLoop]: Abstraction has 68 states and 88 transitions. [2021-12-06 22:35:24,539 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:35:24,539 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 88 transitions. [2021-12-06 22:35:24,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-06 22:35:24,540 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:24,540 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:24,540 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 22:35:24,540 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:24,541 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:24,541 INFO L85 PathProgramCache]: Analyzing trace with hash 764053852, now seen corresponding path program 1 times [2021-12-06 22:35:24,541 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:24,541 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [21391228] [2021-12-06 22:35:24,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:24,541 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:24,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:24,589 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:24,589 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:24,590 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [21391228] [2021-12-06 22:35:24,590 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [21391228] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:24,590 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:35:24,590 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:35:24,590 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367334003] [2021-12-06 22:35:24,590 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:24,591 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:35:24,591 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:24,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:35:24,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:35:24,591 INFO L87 Difference]: Start difference. First operand 68 states and 88 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:35:24,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:24,601 INFO L93 Difference]: Finished difference Result 129 states and 170 transitions. [2021-12-06 22:35:24,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:35:24,602 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-12-06 22:35:24,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:24,603 INFO L225 Difference]: With dead ends: 129 [2021-12-06 22:35:24,603 INFO L226 Difference]: Without dead ends: 68 [2021-12-06 22:35:24,604 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:35:24,605 INFO L933 BasicCegarLoop]: 86 mSDtfsCounter, 70 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 86 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:24,605 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [70 Valid, 86 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:35:24,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2021-12-06 22:35:24,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2021-12-06 22:35:24,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 55 states have (on average 1.3272727272727274) internal successors, (73), 62 states have internal predecessors, (73), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-12-06 22:35:24,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 87 transitions. [2021-12-06 22:35:24,613 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 87 transitions. Word has length 24 [2021-12-06 22:35:24,613 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:24,613 INFO L470 AbstractCegarLoop]: Abstraction has 68 states and 87 transitions. [2021-12-06 22:35:24,613 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:35:24,613 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 87 transitions. [2021-12-06 22:35:24,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-06 22:35:24,614 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:24,615 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:24,615 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 22:35:24,615 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:24,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:24,615 INFO L85 PathProgramCache]: Analyzing trace with hash 1882395024, now seen corresponding path program 1 times [2021-12-06 22:35:24,615 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:24,616 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2038990134] [2021-12-06 22:35:24,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:24,616 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:24,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:24,672 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:24,672 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:24,673 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2038990134] [2021-12-06 22:35:24,673 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2038990134] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:24,673 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:35:24,673 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:35:24,673 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1123103308] [2021-12-06 22:35:24,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:24,674 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:35:24,674 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:24,674 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:35:24,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:35:24,675 INFO L87 Difference]: Start difference. First operand 68 states and 87 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:35:24,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:24,715 INFO L93 Difference]: Finished difference Result 168 states and 221 transitions. [2021-12-06 22:35:24,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:35:24,716 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-12-06 22:35:24,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:24,717 INFO L225 Difference]: With dead ends: 168 [2021-12-06 22:35:24,718 INFO L226 Difference]: Without dead ends: 107 [2021-12-06 22:35:24,719 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:35:24,720 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 67 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:24,721 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 143 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:35:24,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2021-12-06 22:35:24,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 105. [2021-12-06 22:35:24,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 84 states have (on average 1.3095238095238095) internal successors, (110), 92 states have internal predecessors, (110), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2021-12-06 22:35:24,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 134 transitions. [2021-12-06 22:35:24,738 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 134 transitions. Word has length 32 [2021-12-06 22:35:24,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:24,739 INFO L470 AbstractCegarLoop]: Abstraction has 105 states and 134 transitions. [2021-12-06 22:35:24,739 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:35:24,739 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 134 transitions. [2021-12-06 22:35:24,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2021-12-06 22:35:24,741 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:24,741 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:24,741 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 22:35:24,741 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:24,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:24,742 INFO L85 PathProgramCache]: Analyzing trace with hash -1383918710, now seen corresponding path program 1 times [2021-12-06 22:35:24,742 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:24,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [953514228] [2021-12-06 22:35:24,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:24,742 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:24,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:24,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:35:24,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:24,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:35:24,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:24,820 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:24,820 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:24,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [953514228] [2021-12-06 22:35:24,820 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [953514228] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:24,821 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:35:24,821 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:35:24,821 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1178113013] [2021-12-06 22:35:24,821 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:24,821 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:35:24,822 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:24,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:35:24,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:35:24,822 INFO L87 Difference]: Start difference. First operand 105 states and 134 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:35:24,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:24,957 INFO L93 Difference]: Finished difference Result 298 states and 395 transitions. [2021-12-06 22:35:24,957 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 22:35:24,957 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 40 [2021-12-06 22:35:24,958 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:24,961 INFO L225 Difference]: With dead ends: 298 [2021-12-06 22:35:24,961 INFO L226 Difference]: Without dead ends: 200 [2021-12-06 22:35:24,962 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-06 22:35:24,963 INFO L933 BasicCegarLoop]: 73 mSDtfsCounter, 133 mSDsluCounter, 225 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:24,964 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [136 Valid, 298 Invalid, 132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:35:24,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2021-12-06 22:35:24,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 198. [2021-12-06 22:35:24,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 159 states have (on average 1.2767295597484276) internal successors, (203), 170 states have internal predecessors, (203), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (32), 18 states have call predecessors, (32), 18 states have call successors, (32) [2021-12-06 22:35:24,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 253 transitions. [2021-12-06 22:35:24,989 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 253 transitions. Word has length 40 [2021-12-06 22:35:24,990 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:24,990 INFO L470 AbstractCegarLoop]: Abstraction has 198 states and 253 transitions. [2021-12-06 22:35:24,990 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:35:24,990 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 253 transitions. [2021-12-06 22:35:24,992 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-12-06 22:35:24,992 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:24,993 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:24,993 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 22:35:24,993 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:24,993 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:24,994 INFO L85 PathProgramCache]: Analyzing trace with hash 325624560, now seen corresponding path program 1 times [2021-12-06 22:35:24,994 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:24,994 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [5919704] [2021-12-06 22:35:24,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:24,994 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:25,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:35:25,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 22:35:25,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:35:25,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:25,065 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:25,065 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [5919704] [2021-12-06 22:35:25,065 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [5919704] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:25,065 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:35:25,066 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 22:35:25,066 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [576910760] [2021-12-06 22:35:25,066 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:25,066 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 22:35:25,066 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:25,067 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 22:35:25,067 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:35:25,067 INFO L87 Difference]: Start difference. First operand 198 states and 253 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-06 22:35:25,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:25,324 INFO L93 Difference]: Finished difference Result 281 states and 354 transitions. [2021-12-06 22:35:25,324 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-06 22:35:25,325 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2021-12-06 22:35:25,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:25,327 INFO L225 Difference]: With dead ends: 281 [2021-12-06 22:35:25,327 INFO L226 Difference]: Without dead ends: 279 [2021-12-06 22:35:25,328 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 91 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=127, Invalid=335, Unknown=0, NotChecked=0, Total=462 [2021-12-06 22:35:25,328 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 211 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 249 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 213 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:25,329 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [213 Valid, 421 Invalid, 295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 249 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:35:25,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2021-12-06 22:35:25,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 231. [2021-12-06 22:35:25,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 186 states have (on average 1.2580645161290323) internal successors, (234), 202 states have internal predecessors, (234), 20 states have call successors, (20), 18 states have call predecessors, (20), 24 states have return successors, (39), 20 states have call predecessors, (39), 20 states have call successors, (39) [2021-12-06 22:35:25,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 293 transitions. [2021-12-06 22:35:25,350 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 293 transitions. Word has length 44 [2021-12-06 22:35:25,350 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:25,350 INFO L470 AbstractCegarLoop]: Abstraction has 231 states and 293 transitions. [2021-12-06 22:35:25,350 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-06 22:35:25,350 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 293 transitions. [2021-12-06 22:35:25,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-06 22:35:25,352 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:25,352 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:25,352 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 22:35:25,352 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:25,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:25,353 INFO L85 PathProgramCache]: Analyzing trace with hash 1024939841, now seen corresponding path program 1 times [2021-12-06 22:35:25,353 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:25,353 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1776154173] [2021-12-06 22:35:25,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:25,353 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:25,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:35:25,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 22:35:25,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,404 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:25,404 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:25,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1776154173] [2021-12-06 22:35:25,404 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1776154173] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:25,404 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:35:25,404 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 22:35:25,405 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065655733] [2021-12-06 22:35:25,405 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:25,405 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 22:35:25,405 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:25,405 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 22:35:25,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:35:25,406 INFO L87 Difference]: Start difference. First operand 231 states and 293 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:35:25,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:25,548 INFO L93 Difference]: Finished difference Result 495 states and 653 transitions. [2021-12-06 22:35:25,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 22:35:25,548 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 46 [2021-12-06 22:35:25,549 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:25,551 INFO L225 Difference]: With dead ends: 495 [2021-12-06 22:35:25,551 INFO L226 Difference]: Without dead ends: 271 [2021-12-06 22:35:25,552 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-06 22:35:25,552 INFO L933 BasicCegarLoop]: 83 mSDtfsCounter, 137 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 232 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:25,553 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 352 Invalid, 232 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:35:25,554 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2021-12-06 22:35:25,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 237. [2021-12-06 22:35:25,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 237 states, 192 states have (on average 1.25) internal successors, (240), 208 states have internal predecessors, (240), 20 states have call successors, (20), 18 states have call predecessors, (20), 24 states have return successors, (39), 20 states have call predecessors, (39), 20 states have call successors, (39) [2021-12-06 22:35:25,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 237 states to 237 states and 299 transitions. [2021-12-06 22:35:25,570 INFO L78 Accepts]: Start accepts. Automaton has 237 states and 299 transitions. Word has length 46 [2021-12-06 22:35:25,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:25,570 INFO L470 AbstractCegarLoop]: Abstraction has 237 states and 299 transitions. [2021-12-06 22:35:25,571 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:35:25,571 INFO L276 IsEmpty]: Start isEmpty. Operand 237 states and 299 transitions. [2021-12-06 22:35:25,572 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-06 22:35:25,572 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:25,572 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:25,572 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 22:35:25,572 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:25,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:25,573 INFO L85 PathProgramCache]: Analyzing trace with hash -969204865, now seen corresponding path program 1 times [2021-12-06 22:35:25,573 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:25,573 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [174293425] [2021-12-06 22:35:25,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:25,573 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:25,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:35:25,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 22:35:25,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,627 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:25,627 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:25,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [174293425] [2021-12-06 22:35:25,627 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [174293425] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:25,627 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:35:25,627 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 22:35:25,628 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1842329151] [2021-12-06 22:35:25,628 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:25,628 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 22:35:25,628 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:25,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 22:35:25,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:35:25,629 INFO L87 Difference]: Start difference. First operand 237 states and 299 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:35:25,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:25,773 INFO L93 Difference]: Finished difference Result 463 states and 597 transitions. [2021-12-06 22:35:25,773 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 22:35:25,774 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2021-12-06 22:35:25,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:25,776 INFO L225 Difference]: With dead ends: 463 [2021-12-06 22:35:25,776 INFO L226 Difference]: Without dead ends: 233 [2021-12-06 22:35:25,777 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-06 22:35:25,778 INFO L933 BasicCegarLoop]: 82 mSDtfsCounter, 233 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 206 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:25,778 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [236 Valid, 284 Invalid, 206 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:35:25,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 233 states. [2021-12-06 22:35:25,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 233 to 182. [2021-12-06 22:35:25,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 146 states have (on average 1.2465753424657535) internal successors, (182), 158 states have internal predecessors, (182), 17 states have call successors, (17), 15 states have call predecessors, (17), 18 states have return successors, (28), 16 states have call predecessors, (28), 17 states have call successors, (28) [2021-12-06 22:35:25,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 227 transitions. [2021-12-06 22:35:25,795 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 227 transitions. Word has length 46 [2021-12-06 22:35:25,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:25,795 INFO L470 AbstractCegarLoop]: Abstraction has 182 states and 227 transitions. [2021-12-06 22:35:25,795 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:35:25,796 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 227 transitions. [2021-12-06 22:35:25,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-06 22:35:25,797 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:25,797 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:25,797 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 22:35:25,797 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:25,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:25,798 INFO L85 PathProgramCache]: Analyzing trace with hash -1786853315, now seen corresponding path program 1 times [2021-12-06 22:35:25,798 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:25,798 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [548771574] [2021-12-06 22:35:25,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:25,798 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:25,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:35:25,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 22:35:25,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:25,855 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:25,855 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:25,855 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [548771574] [2021-12-06 22:35:25,855 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [548771574] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:25,855 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:35:25,855 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 22:35:25,855 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2002371917] [2021-12-06 22:35:25,855 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:25,856 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 22:35:25,856 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:25,856 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 22:35:25,856 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:35:25,856 INFO L87 Difference]: Start difference. First operand 182 states and 227 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:35:26,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:26,078 INFO L93 Difference]: Finished difference Result 417 states and 553 transitions. [2021-12-06 22:35:26,078 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 22:35:26,078 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 46 [2021-12-06 22:35:26,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:26,081 INFO L225 Difference]: With dead ends: 417 [2021-12-06 22:35:26,081 INFO L226 Difference]: Without dead ends: 282 [2021-12-06 22:35:26,082 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2021-12-06 22:35:26,083 INFO L933 BasicCegarLoop]: 120 mSDtfsCounter, 206 mSDsluCounter, 332 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 452 SdHoareTripleChecker+Invalid, 317 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:26,083 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [207 Valid, 452 Invalid, 317 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:35:26,084 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2021-12-06 22:35:26,104 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 271. [2021-12-06 22:35:26,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 217 states have (on average 1.2211981566820276) internal successors, (265), 232 states have internal predecessors, (265), 25 states have call successors, (25), 23 states have call predecessors, (25), 28 states have return successors, (54), 27 states have call predecessors, (54), 25 states have call successors, (54) [2021-12-06 22:35:26,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 344 transitions. [2021-12-06 22:35:26,107 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 344 transitions. Word has length 46 [2021-12-06 22:35:26,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:26,108 INFO L470 AbstractCegarLoop]: Abstraction has 271 states and 344 transitions. [2021-12-06 22:35:26,108 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:35:26,108 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 344 transitions. [2021-12-06 22:35:26,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2021-12-06 22:35:26,110 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:26,110 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:26,111 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 22:35:26,111 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:26,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:26,111 INFO L85 PathProgramCache]: Analyzing trace with hash 1370841909, now seen corresponding path program 1 times [2021-12-06 22:35:26,111 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:26,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2012292694] [2021-12-06 22:35:26,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:26,112 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:26,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:26,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:35:26,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:26,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:35:26,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:26,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 22:35:26,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:26,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-06 22:35:26,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:26,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:35:26,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:26,213 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 11 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-12-06 22:35:26,214 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:26,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2012292694] [2021-12-06 22:35:26,214 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2012292694] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:35:26,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1491060537] [2021-12-06 22:35:26,214 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:26,215 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:35:26,215 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:35:26,216 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:35:26,217 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 22:35:26,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:26,283 INFO L263 TraceCheckSpWp]: Trace formula consists of 436 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 22:35:26,290 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:35:26,432 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:35:26,433 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:35:26,549 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 12 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-12-06 22:35:26,549 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1491060537] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:35:26,549 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:35:26,549 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2021-12-06 22:35:26,550 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1900845963] [2021-12-06 22:35:26,550 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:35:26,551 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 22:35:26,551 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:26,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 22:35:26,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:35:26,551 INFO L87 Difference]: Start difference. First operand 271 states and 344 transitions. Second operand has 9 states, 9 states have (on average 8.333333333333334) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-06 22:35:26,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:26,912 INFO L93 Difference]: Finished difference Result 636 states and 856 transitions. [2021-12-06 22:35:26,912 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2021-12-06 22:35:26,912 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 8.333333333333334) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 80 [2021-12-06 22:35:26,912 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:26,915 INFO L225 Difference]: With dead ends: 636 [2021-12-06 22:35:26,915 INFO L226 Difference]: Without dead ends: 412 [2021-12-06 22:35:26,916 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 201 GetRequests, 172 SyntacticMatches, 3 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 171 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=214, Invalid=542, Unknown=0, NotChecked=0, Total=756 [2021-12-06 22:35:26,917 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 301 mSDsluCounter, 426 mSDsCounter, 0 mSdLazyCounter, 398 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 305 SdHoareTripleChecker+Valid, 553 SdHoareTripleChecker+Invalid, 507 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 398 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:26,917 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [305 Valid, 553 Invalid, 507 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 398 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 22:35:26,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 412 states. [2021-12-06 22:35:26,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 412 to 365. [2021-12-06 22:35:26,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 365 states, 289 states have (on average 1.2283737024221453) internal successors, (355), 310 states have internal predecessors, (355), 36 states have call successors, (36), 33 states have call predecessors, (36), 39 states have return successors, (82), 36 states have call predecessors, (82), 36 states have call successors, (82) [2021-12-06 22:35:26,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 473 transitions. [2021-12-06 22:35:26,937 INFO L78 Accepts]: Start accepts. Automaton has 365 states and 473 transitions. Word has length 80 [2021-12-06 22:35:26,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:26,938 INFO L470 AbstractCegarLoop]: Abstraction has 365 states and 473 transitions. [2021-12-06 22:35:26,938 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 8.333333333333334) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-06 22:35:26,938 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 473 transitions. [2021-12-06 22:35:26,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:35:26,939 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:26,940 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:26,974 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 22:35:27,140 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-06 22:35:27,140 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:27,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:27,141 INFO L85 PathProgramCache]: Analyzing trace with hash -2051063763, now seen corresponding path program 2 times [2021-12-06 22:35:27,141 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:27,141 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [657560772] [2021-12-06 22:35:27,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:27,141 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:27,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:27,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:35:27,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:27,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:35:27,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:27,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 22:35:27,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:27,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-06 22:35:27,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:27,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-06 22:35:27,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:27,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:35:27,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:27,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2021-12-06 22:35:27,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:27,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:35:27,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:27,287 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 51 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 22:35:27,287 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:27,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [657560772] [2021-12-06 22:35:27,288 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [657560772] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:35:27,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1563746013] [2021-12-06 22:35:27,288 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 22:35:27,288 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:35:27,288 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:35:27,289 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:35:27,289 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-06 22:35:27,359 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-12-06 22:35:27,360 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:35:27,362 INFO L263 TraceCheckSpWp]: Trace formula consists of 519 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-06 22:35:27,366 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:35:27,531 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 22:35:27,531 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:35:27,531 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1563746013] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:27,531 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 22:35:27,531 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2021-12-06 22:35:27,532 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [268269334] [2021-12-06 22:35:27,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:27,532 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:35:27,532 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:27,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:35:27,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2021-12-06 22:35:27,533 INFO L87 Difference]: Start difference. First operand 365 states and 473 transitions. Second operand has 6 states, 6 states have (on average 14.833333333333334) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2021-12-06 22:35:27,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:27,725 INFO L93 Difference]: Finished difference Result 1004 states and 1357 transitions. [2021-12-06 22:35:27,725 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 22:35:27,725 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 14.833333333333334) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 114 [2021-12-06 22:35:27,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:27,730 INFO L225 Difference]: With dead ends: 1004 [2021-12-06 22:35:27,731 INFO L226 Difference]: Without dead ends: 685 [2021-12-06 22:35:27,733 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 127 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2021-12-06 22:35:27,734 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 232 mSDsluCounter, 352 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 232 SdHoareTripleChecker+Valid, 490 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:27,734 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [232 Valid, 490 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:35:27,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 685 states. [2021-12-06 22:35:27,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 685 to 616. [2021-12-06 22:35:27,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 616 states, 489 states have (on average 1.2229038854805725) internal successors, (598), 518 states have internal predecessors, (598), 61 states have call successors, (61), 58 states have call predecessors, (61), 65 states have return successors, (123), 63 states have call predecessors, (123), 61 states have call successors, (123) [2021-12-06 22:35:27,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 616 states to 616 states and 782 transitions. [2021-12-06 22:35:27,783 INFO L78 Accepts]: Start accepts. Automaton has 616 states and 782 transitions. Word has length 114 [2021-12-06 22:35:27,784 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:27,784 INFO L470 AbstractCegarLoop]: Abstraction has 616 states and 782 transitions. [2021-12-06 22:35:27,784 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 14.833333333333334) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2021-12-06 22:35:27,784 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 782 transitions. [2021-12-06 22:35:27,787 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:35:27,787 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:35:27,787 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:27,808 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-06 22:35:27,987 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-06 22:35:27,988 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:35:27,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:35:27,988 INFO L85 PathProgramCache]: Analyzing trace with hash -1607163089, now seen corresponding path program 1 times [2021-12-06 22:35:27,988 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:35:27,988 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [509672100] [2021-12-06 22:35:27,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:27,989 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:35:28,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:35:28,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:35:28,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 22:35:28,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-06 22:35:28,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-06 22:35:28,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:35:28,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2021-12-06 22:35:28,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:35:28,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,063 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 42 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2021-12-06 22:35:28,063 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:35:28,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [509672100] [2021-12-06 22:35:28,063 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [509672100] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:35:28,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1378519488] [2021-12-06 22:35:28,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:35:28,063 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:35:28,063 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:35:28,064 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:35:28,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-06 22:35:28,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:35:28,136 INFO L263 TraceCheckSpWp]: Trace formula consists of 520 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-06 22:35:28,139 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:35:28,229 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-06 22:35:28,229 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:35:28,229 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1378519488] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:35:28,229 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 22:35:28,229 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 11 [2021-12-06 22:35:28,229 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [941343943] [2021-12-06 22:35:28,229 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:35:28,230 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:35:28,230 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:35:28,230 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:35:28,230 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2021-12-06 22:35:28,231 INFO L87 Difference]: Start difference. First operand 616 states and 782 transitions. Second operand has 5 states, 5 states have (on average 16.4) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 22:35:28,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:35:28,257 INFO L93 Difference]: Finished difference Result 850 states and 1064 transitions. [2021-12-06 22:35:28,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:35:28,257 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.4) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 114 [2021-12-06 22:35:28,257 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:35:28,258 INFO L225 Difference]: With dead ends: 850 [2021-12-06 22:35:28,258 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 22:35:28,260 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 128 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2021-12-06 22:35:28,260 INFO L933 BasicCegarLoop]: 89 mSDtfsCounter, 27 mSDsluCounter, 235 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 324 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:35:28,260 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 324 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:35:28,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 22:35:28,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 22:35:28,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:35:28,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 22:35:28,261 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 114 [2021-12-06 22:35:28,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:35:28,261 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 22:35:28,261 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.4) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 22:35:28,261 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 22:35:28,262 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 22:35:28,263 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 22:35:28,296 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-12-06 22:35:28,464 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:35:28,466 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 22:35:29,819 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 156 162) no Hoare annotation was computed. [2021-12-06 22:35:29,820 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 156 162) the Hoare annotation is: true [2021-12-06 22:35:29,820 INFO L858 garLoopResultBuilder]: For program point L402-1(lines 398 409) no Hoare annotation was computed. [2021-12-06 22:35:29,820 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 398 409) the Hoare annotation is: true [2021-12-06 22:35:29,820 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 398 409) no Hoare annotation was computed. [2021-12-06 22:35:29,820 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 514 543) no Hoare annotation was computed. [2021-12-06 22:35:29,820 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 514 543) the Hoare annotation is: true [2021-12-06 22:35:29,820 INFO L861 garLoopResultBuilder]: At program point L539(lines 514 543) the Hoare annotation is: true [2021-12-06 22:35:29,820 INFO L858 garLoopResultBuilder]: For program point L535(line 535) no Hoare annotation was computed. [2021-12-06 22:35:29,820 INFO L858 garLoopResultBuilder]: For program point L528(lines 528 532) no Hoare annotation was computed. [2021-12-06 22:35:29,820 INFO L861 garLoopResultBuilder]: At program point L528-1(lines 528 532) the Hoare annotation is: true [2021-12-06 22:35:29,820 INFO L858 garLoopResultBuilder]: For program point L525(line 525) no Hoare annotation was computed. [2021-12-06 22:35:29,820 INFO L861 garLoopResultBuilder]: At program point L524-2(lines 524 538) the Hoare annotation is: true [2021-12-06 22:35:29,820 INFO L861 garLoopResultBuilder]: At program point L520(line 520) the Hoare annotation is: true [2021-12-06 22:35:29,820 INFO L858 garLoopResultBuilder]: For program point L520-1(line 520) no Hoare annotation was computed. [2021-12-06 22:35:29,820 INFO L858 garLoopResultBuilder]: For program point L378(lines 378 382) no Hoare annotation was computed. [2021-12-06 22:35:29,821 INFO L854 garLoopResultBuilder]: At program point L378-2(lines 374 385) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,821 INFO L854 garLoopResultBuilder]: At program point L246(lines 241 248) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,821 INFO L854 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,821 INFO L854 garLoopResultBuilder]: At program point L209-1(lines 190 214) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse1 (<= 2 ~waterLevel~0) (and .cse2 (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,821 INFO L858 garLoopResultBuilder]: For program point L143-1(lines 143 149) no Hoare annotation was computed. [2021-12-06 22:35:29,821 INFO L858 garLoopResultBuilder]: For program point L333(lines 333 337) no Hoare annotation was computed. [2021-12-06 22:35:29,821 INFO L858 garLoopResultBuilder]: For program point L333-2(lines 333 337) no Hoare annotation was computed. [2021-12-06 22:35:29,821 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 132 155) no Hoare annotation was computed. [2021-12-06 22:35:29,821 INFO L858 garLoopResultBuilder]: For program point L358(lines 358 364) no Hoare annotation was computed. [2021-12-06 22:35:29,821 INFO L858 garLoopResultBuilder]: For program point L354(lines 354 367) no Hoare annotation was computed. [2021-12-06 22:35:29,821 INFO L854 garLoopResultBuilder]: At program point L354-1(lines 346 370) the Hoare annotation is: (let ((.cse0 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1|)) (.cse1 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|)) .cse3 .cse4) (or .cse5 .cse3 (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse4) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse2 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 1) (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1))))) [2021-12-06 22:35:29,822 INFO L854 garLoopResultBuilder]: At program point L470(lines 465 473) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,822 INFO L858 garLoopResultBuilder]: For program point L136-1(lines 135 154) no Hoare annotation was computed. [2021-12-06 22:35:29,822 INFO L858 garLoopResultBuilder]: For program point L198(lines 198 206) no Hoare annotation was computed. [2021-12-06 22:35:29,822 INFO L858 garLoopResultBuilder]: For program point L194(lines 194 211) no Hoare annotation was computed. [2021-12-06 22:35:29,822 INFO L854 garLoopResultBuilder]: At program point L339(lines 324 342) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,822 INFO L858 garLoopResultBuilder]: For program point L979(line 979) no Hoare annotation was computed. [2021-12-06 22:35:29,822 INFO L854 garLoopResultBuilder]: At program point L265(lines 260 268) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,822 INFO L854 garLoopResultBuilder]: At program point L447(lines 442 450) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (<= 2 |timeShift_getWaterLevel_#res#1|))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (and .cse2 .cse7 .cse3))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse1 (and .cse2 .cse3) (and .cse4 (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|)) .cse5) (or .cse0 .cse1 .cse6 .cse5) (or .cse0 (and .cse4 .cse7) .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse6)))) [2021-12-06 22:35:29,822 INFO L854 garLoopResultBuilder]: At program point L980(lines 975 982) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,822 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 132 155) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1))))) [2021-12-06 22:35:29,822 INFO L854 garLoopResultBuilder]: At program point L204(line 204) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,822 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 132 155) no Hoare annotation was computed. [2021-12-06 22:35:29,822 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 979) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L854 garLoopResultBuilder]: At program point L572(lines 568 574) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 22:35:29,823 INFO L854 garLoopResultBuilder]: At program point L110(lines 63 111) the Hoare annotation is: false [2021-12-06 22:35:29,823 INFO L858 garLoopResultBuilder]: For program point L65(lines 64 109) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L858 garLoopResultBuilder]: For program point L94(lines 94 105) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L854 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-12-06 22:35:29,823 INFO L854 garLoopResultBuilder]: At program point L107(lines 64 109) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-12-06 22:35:29,823 INFO L858 garLoopResultBuilder]: For program point L74(lines 74 80) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L858 garLoopResultBuilder]: For program point L74-1(lines 74 80) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L861 garLoopResultBuilder]: At program point L582(lines 575 584) the Hoare annotation is: true [2021-12-06 22:35:29,823 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 22:35:29,823 INFO L854 garLoopResultBuilder]: At program point L508(lines 503 511) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 22:35:29,823 INFO L854 garLoopResultBuilder]: At program point L500(lines 496 502) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 22:35:29,824 INFO L858 garLoopResultBuilder]: For program point L595(lines 595 602) no Hoare annotation was computed. [2021-12-06 22:35:29,824 INFO L858 garLoopResultBuilder]: For program point L595-2(lines 595 602) no Hoare annotation was computed. [2021-12-06 22:35:29,824 INFO L858 garLoopResultBuilder]: For program point L100(lines 100 104) no Hoare annotation was computed. [2021-12-06 22:35:29,824 INFO L854 garLoopResultBuilder]: At program point L100-2(lines 94 105) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-12-06 22:35:29,824 INFO L861 garLoopResultBuilder]: At program point L604(lines 585 607) the Hoare annotation is: true [2021-12-06 22:35:29,824 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2021-12-06 22:35:29,824 INFO L858 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2021-12-06 22:35:29,824 INFO L861 garLoopResultBuilder]: At program point L113(lines 54 117) the Hoare annotation is: true [2021-12-06 22:35:29,824 INFO L854 garLoopResultBuilder]: At program point L493(lines 489 495) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 22:35:29,824 INFO L854 garLoopResultBuilder]: At program point L76(line 76) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2021-12-06 22:35:29,824 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 164 188) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))))) [2021-12-06 22:35:29,824 INFO L854 garLoopResultBuilder]: At program point L320(lines 305 323) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))))) [2021-12-06 22:35:29,824 INFO L854 garLoopResultBuilder]: At program point L256(lines 249 259) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) [2021-12-06 22:35:29,824 INFO L854 garLoopResultBuilder]: At program point L415(lines 410 418) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) [2021-12-06 22:35:29,824 INFO L858 garLoopResultBuilder]: For program point L314(lines 314 318) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L858 garLoopResultBuilder]: For program point L314-2(lines 314 318) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L854 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) .cse2) .cse3) (or .cse0 .cse3 (not (<= 2 ~waterLevel~0)) (and .cse1 .cse2)))) [2021-12-06 22:35:29,825 INFO L858 garLoopResultBuilder]: For program point L172(lines 172 180) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L858 garLoopResultBuilder]: For program point L168(lines 168 185) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L858 garLoopResultBuilder]: For program point L455(lines 455 461) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L854 garLoopResultBuilder]: At program point L220(lines 215 222) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0)) [2021-12-06 22:35:29,825 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 164 188) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L854 garLoopResultBuilder]: At program point L183(line 183) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2021-12-06 22:35:29,825 INFO L858 garLoopResultBuilder]: For program point L183-1(lines 164 188) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L854 garLoopResultBuilder]: At program point L460(lines 451 464) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0))) [2021-12-06 22:35:29,825 INFO L858 garLoopResultBuilder]: For program point L231(lines 231 237) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L854 garLoopResultBuilder]: At program point L231-2(lines 224 240) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0)) [2021-12-06 22:35:29,825 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 386 397) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L858 garLoopResultBuilder]: For program point L390-1(lines 386 397) no Hoare annotation was computed. [2021-12-06 22:35:29,825 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 386 397) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:35:29,828 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:35:29,829 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 22:35:29,846 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 10:35:29 BoogieIcfgContainer [2021-12-06 22:35:29,846 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 22:35:29,847 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 22:35:29,847 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 22:35:29,847 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 22:35:29,847 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:35:24" (3/4) ... [2021-12-06 22:35:29,849 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 22:35:29,854 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 22:35:29,854 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 22:35:29,854 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 22:35:29,854 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 22:35:29,854 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 22:35:29,854 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 22:35:29,859 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-06 22:35:29,860 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 22:35:29,860 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 22:35:29,861 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 22:35:29,861 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 22:35:29,862 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 22:35:29,862 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 22:35:29,878 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2021-12-06 22:35:29,879 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(1 == systemActive) || 2 <= waterLevel) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2021-12-06 22:35:29,879 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && (((!(1 == systemActive) || (2 <= waterLevel && 2 <= \result)) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) [2021-12-06 22:35:29,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 <= waterLevel && 2 <= tmp) && 2 <= \result) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result)) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && \result == 1)) [2021-12-06 22:35:29,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2021-12-06 22:35:29,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0) [2021-12-06 22:35:29,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2021-12-06 22:35:29,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) [2021-12-06 22:35:29,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((1 <= \result && pumpRunning == 0) && tmp___0 == 0) && 1 <= tmp) && \result == 0)) [2021-12-06 22:35:29,880 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2021-12-06 22:35:29,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) [2021-12-06 22:35:29,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) [2021-12-06 22:35:29,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) [2021-12-06 22:35:29,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel [2021-12-06 22:35:29,881 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel [2021-12-06 22:35:29,901 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 22:35:29,901 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 22:35:29,902 INFO L158 Benchmark]: Toolchain (without parser) took 6599.59ms. Allocated memory was 102.8MB in the beginning and 155.2MB in the end (delta: 52.4MB). Free memory was 68.3MB in the beginning and 92.2MB in the end (delta: -23.9MB). Peak memory consumption was 27.7MB. Max. memory is 16.1GB. [2021-12-06 22:35:29,902 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 102.8MB. Free memory is still 55.8MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:35:29,902 INFO L158 Benchmark]: CACSL2BoogieTranslator took 302.26ms. Allocated memory is still 102.8MB. Free memory was 68.1MB in the beginning and 69.4MB in the end (delta: -1.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-06 22:35:29,902 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.63ms. Allocated memory is still 102.8MB. Free memory was 69.4MB in the beginning and 67.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 22:35:29,903 INFO L158 Benchmark]: Boogie Preprocessor took 22.51ms. Allocated memory is still 102.8MB. Free memory was 67.0MB in the beginning and 65.2MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 22:35:29,903 INFO L158 Benchmark]: RCFGBuilder took 401.63ms. Allocated memory was 102.8MB in the beginning and 127.9MB in the end (delta: 25.2MB). Free memory was 65.2MB in the beginning and 102.9MB in the end (delta: -37.8MB). Peak memory consumption was 21.6MB. Max. memory is 16.1GB. [2021-12-06 22:35:29,903 INFO L158 Benchmark]: TraceAbstraction took 5764.36ms. Allocated memory was 127.9MB in the beginning and 155.2MB in the end (delta: 27.3MB). Free memory was 102.5MB in the beginning and 99.5MB in the end (delta: 3.0MB). Peak memory consumption was 91.4MB. Max. memory is 16.1GB. [2021-12-06 22:35:29,903 INFO L158 Benchmark]: Witness Printer took 54.38ms. Allocated memory is still 155.2MB. Free memory was 99.5MB in the beginning and 92.2MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-06 22:35:29,905 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 102.8MB. Free memory is still 55.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 302.26ms. Allocated memory is still 102.8MB. Free memory was 68.1MB in the beginning and 69.4MB in the end (delta: -1.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.63ms. Allocated memory is still 102.8MB. Free memory was 69.4MB in the beginning and 67.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 22.51ms. Allocated memory is still 102.8MB. Free memory was 67.0MB in the beginning and 65.2MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 401.63ms. Allocated memory was 102.8MB in the beginning and 127.9MB in the end (delta: 25.2MB). Free memory was 65.2MB in the beginning and 102.9MB in the end (delta: -37.8MB). Peak memory consumption was 21.6MB. Max. memory is 16.1GB. * TraceAbstraction took 5764.36ms. Allocated memory was 127.9MB in the beginning and 155.2MB in the end (delta: 27.3MB). Free memory was 102.5MB in the beginning and 99.5MB in the end (delta: 3.0MB). Peak memory consumption was 91.4MB. Max. memory is 16.1GB. * Witness Printer took 54.38ms. Allocated memory is still 155.2MB. Free memory was 99.5MB in the beginning and 92.2MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 979]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 86 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.7s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1645 SdHoareTripleChecker+Valid, 0.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1629 mSDsluCounter, 3670 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2494 mSDsCounter, 364 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1501 IncrementalHoareTripleChecker+Invalid, 1865 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 364 mSolverCounterUnsat, 1176 mSDtfsCounter, 1501 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 599 GetRequests, 470 SyntacticMatches, 6 SemanticMatches, 123 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 397 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=616occurred in iteration=11, InterpolantAutomatonStates: 116, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 264 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 1198 PreInvPairs, 1321 NumberOfFragments, 940 HoareAnnotationTreeSize, 1198 FomulaSimplifications, 2010 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 41 FomulaSimplificationsInter, 13901 FormulaSimplificationTreeSizeReductionInter, 0.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 933 NumberOfCodeBlocks, 933 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 997 ConstructedInterpolants, 0 QuantifiedInterpolants, 1815 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1475 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 317/356 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && (((!(1 == systemActive) || (2 <= waterLevel && 2 <= \result)) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result)) - InvariantResult [Line: 514]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 374]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 975]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 215]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0) - InvariantResult [Line: 305]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((1 <= \result && pumpRunning == 0) && tmp___0 == 0) && 1 <= tmp) && \result == 0)) - InvariantResult [Line: 524]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 190]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(1 == systemActive) || 2 <= waterLevel) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: ((((((2 <= waterLevel && 2 <= tmp) && 2 <= \result) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result)) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && \result == 1)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) RESULT: Ultimate proved your program to be correct! [2021-12-06 22:35:29,938 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a28a4d49-0f97-49bd-b0f2-e19935ef82f3/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE