./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 22:55:26,902 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 22:55:26,903 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 22:55:26,925 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 22:55:26,925 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 22:55:26,926 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 22:55:26,927 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 22:55:26,929 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 22:55:26,930 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 22:55:26,931 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 22:55:26,932 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 22:55:26,933 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 22:55:26,933 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 22:55:26,934 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 22:55:26,935 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 22:55:26,936 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 22:55:26,937 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 22:55:26,938 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 22:55:26,940 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 22:55:26,941 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 22:55:26,943 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 22:55:26,944 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 22:55:26,945 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 22:55:26,946 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 22:55:26,949 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 22:55:26,949 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 22:55:26,949 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 22:55:26,950 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 22:55:26,951 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 22:55:26,951 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 22:55:26,952 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 22:55:26,952 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 22:55:26,953 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 22:55:26,954 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 22:55:26,955 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 22:55:26,955 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 22:55:26,956 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 22:55:26,956 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 22:55:26,956 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 22:55:26,957 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 22:55:26,957 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 22:55:26,958 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 22:55:26,975 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 22:55:26,975 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 22:55:26,975 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 22:55:26,975 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 22:55:26,976 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 22:55:26,976 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 22:55:26,977 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 22:55:26,977 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 22:55:26,977 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 22:55:26,977 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 22:55:26,977 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 22:55:26,977 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 22:55:26,978 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 22:55:26,978 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 22:55:26,978 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 22:55:26,978 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 22:55:26,978 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 22:55:26,978 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 22:55:26,978 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 22:55:26,978 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 22:55:26,979 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 22:55:26,979 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 22:55:26,979 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 22:55:26,979 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 22:55:26,979 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:55:26,979 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 22:55:26,983 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 22:55:26,983 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 22:55:26,984 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 22:55:26,984 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 22:55:26,984 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 22:55:26,984 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 22:55:26,984 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 22:55:26,984 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 22:55:26,984 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 [2021-12-06 22:55:27,166 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 22:55:27,181 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 22:55:27,183 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 22:55:27,184 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 22:55:27,184 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 22:55:27,185 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2021-12-06 22:55:27,229 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/data/0cc0d731e/a8a128f92eb248f4a5eba253fc331f62/FLAGb11c59108 [2021-12-06 22:55:27,646 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 22:55:27,646 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2021-12-06 22:55:27,659 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/data/0cc0d731e/a8a128f92eb248f4a5eba253fc331f62/FLAGb11c59108 [2021-12-06 22:55:27,669 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/data/0cc0d731e/a8a128f92eb248f4a5eba253fc331f62 [2021-12-06 22:55:27,671 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 22:55:27,672 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 22:55:27,674 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 22:55:27,674 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 22:55:27,676 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 22:55:27,677 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:27,678 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3a5bfd54 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27, skipping insertion in model container [2021-12-06 22:55:27,678 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:27,683 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 22:55:27,719 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:55:27,880 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2021-12-06 22:55:27,896 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:55:27,902 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 22:55:27,944 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2021-12-06 22:55:27,952 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:55:27,965 INFO L208 MainTranslator]: Completed translation [2021-12-06 22:55:27,966 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27 WrapperNode [2021-12-06 22:55:27,966 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 22:55:27,966 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 22:55:27,967 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 22:55:27,967 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 22:55:27,972 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:27,982 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:28,001 INFO L137 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 267 [2021-12-06 22:55:28,001 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 22:55:28,002 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 22:55:28,002 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 22:55:28,002 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 22:55:28,008 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:28,008 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:28,010 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:28,011 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:28,015 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:28,018 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:28,020 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:28,022 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 22:55:28,023 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 22:55:28,023 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 22:55:28,023 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 22:55:28,024 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (1/1) ... [2021-12-06 22:55:28,039 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:55:28,055 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:55:28,067 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 22:55:28,069 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 22:55:28,105 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 22:55:28,106 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 22:55:28,106 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 22:55:28,106 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 22:55:28,106 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 22:55:28,106 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 22:55:28,106 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 22:55:28,106 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 22:55:28,106 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 22:55:28,107 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 22:55:28,107 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 22:55:28,107 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-06 22:55:28,107 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-06 22:55:28,107 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-06 22:55:28,107 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-06 22:55:28,107 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 22:55:28,107 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 22:55:28,107 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 22:55:28,108 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 22:55:28,108 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 22:55:28,161 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 22:55:28,163 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 22:55:28,400 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 22:55:28,406 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 22:55:28,407 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 22:55:28,408 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:55:28 BoogieIcfgContainer [2021-12-06 22:55:28,408 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 22:55:28,410 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 22:55:28,410 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 22:55:28,413 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 22:55:28,413 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 10:55:27" (1/3) ... [2021-12-06 22:55:28,414 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d9d1a0b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:55:28, skipping insertion in model container [2021-12-06 22:55:28,414 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:55:27" (2/3) ... [2021-12-06 22:55:28,415 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d9d1a0b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:55:28, skipping insertion in model container [2021-12-06 22:55:28,415 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:55:28" (3/3) ... [2021-12-06 22:55:28,416 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product46.cil.c [2021-12-06 22:55:28,421 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 22:55:28,422 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 22:55:28,463 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 22:55:28,469 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 22:55:28,470 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 22:55:28,485 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-06 22:55:28,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-06 22:55:28,492 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:28,492 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:28,493 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:28,496 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:28,496 INFO L85 PathProgramCache]: Analyzing trace with hash -1607314381, now seen corresponding path program 1 times [2021-12-06 22:55:28,503 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:28,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1466739156] [2021-12-06 22:55:28,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:28,504 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:28,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:28,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 22:55:28,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:28,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 22:55:28,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:28,657 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:55:28,657 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:28,658 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1466739156] [2021-12-06 22:55:28,658 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1466739156] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:55:28,658 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:55:28,659 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:55:28,660 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1958021268] [2021-12-06 22:55:28,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:55:28,665 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 22:55:28,665 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:28,690 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 22:55:28,690 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:55:28,692 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:55:28,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:28,717 INFO L93 Difference]: Finished difference Result 189 states and 254 transitions. [2021-12-06 22:55:28,717 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 22:55:28,719 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-06 22:55:28,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:28,729 INFO L225 Difference]: With dead ends: 189 [2021-12-06 22:55:28,729 INFO L226 Difference]: Without dead ends: 90 [2021-12-06 22:55:28,733 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:55:28,737 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:28,738 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:55:28,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-12-06 22:55:28,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-12-06 22:55:28,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.2941176470588236) internal successors, (88), 75 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-06 22:55:28,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 115 transitions. [2021-12-06 22:55:28,774 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 115 transitions. Word has length 32 [2021-12-06 22:55:28,774 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:28,774 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 115 transitions. [2021-12-06 22:55:28,775 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:55:28,775 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 115 transitions. [2021-12-06 22:55:28,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-06 22:55:28,778 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:28,778 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:28,778 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 22:55:28,778 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:28,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:28,779 INFO L85 PathProgramCache]: Analyzing trace with hash -824221923, now seen corresponding path program 1 times [2021-12-06 22:55:28,779 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:28,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286607973] [2021-12-06 22:55:28,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:28,779 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:28,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:28,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 22:55:28,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:28,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 22:55:28,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:28,853 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:55:28,853 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:28,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286607973] [2021-12-06 22:55:28,854 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1286607973] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:55:28,854 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:55:28,854 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:55:28,854 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2039442520] [2021-12-06 22:55:28,855 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:55:28,856 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:55:28,856 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:28,857 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:55:28,857 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:55:28,857 INFO L87 Difference]: Start difference. First operand 90 states and 115 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:55:28,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:28,875 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2021-12-06 22:55:28,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:55:28,876 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-06 22:55:28,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:28,877 INFO L225 Difference]: With dead ends: 144 [2021-12-06 22:55:28,877 INFO L226 Difference]: Without dead ends: 81 [2021-12-06 22:55:28,879 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:55:28,880 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 13 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:28,881 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:55:28,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-06 22:55:28,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-06 22:55:28,891 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-06 22:55:28,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 103 transitions. [2021-12-06 22:55:28,893 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 103 transitions. Word has length 33 [2021-12-06 22:55:28,893 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:28,893 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 103 transitions. [2021-12-06 22:55:28,893 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:55:28,894 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2021-12-06 22:55:28,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-06 22:55:28,895 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:28,895 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:28,896 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 22:55:28,896 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:28,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:28,896 INFO L85 PathProgramCache]: Analyzing trace with hash 534456794, now seen corresponding path program 1 times [2021-12-06 22:55:28,897 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:28,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1053054303] [2021-12-06 22:55:28,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:28,897 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:28,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:28,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:55:28,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:28,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 22:55:28,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:28,976 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:55:28,976 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:28,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1053054303] [2021-12-06 22:55:28,977 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1053054303] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:55:28,977 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:55:28,977 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:55:28,977 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2072548986] [2021-12-06 22:55:28,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:55:28,978 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:55:28,978 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:28,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:55:28,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:55:28,979 INFO L87 Difference]: Start difference. First operand 81 states and 103 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:55:29,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:29,030 INFO L93 Difference]: Finished difference Result 154 states and 199 transitions. [2021-12-06 22:55:29,030 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:55:29,030 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-06 22:55:29,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:29,032 INFO L225 Difference]: With dead ends: 154 [2021-12-06 22:55:29,032 INFO L226 Difference]: Without dead ends: 81 [2021-12-06 22:55:29,032 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:55:29,033 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 126 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:29,034 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [126 Valid, 254 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:55:29,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-06 22:55:29,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-06 22:55:29,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-06 22:55:29,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 102 transitions. [2021-12-06 22:55:29,043 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 102 transitions. Word has length 38 [2021-12-06 22:55:29,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:29,044 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 102 transitions. [2021-12-06 22:55:29,044 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:55:29,045 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 102 transitions. [2021-12-06 22:55:29,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2021-12-06 22:55:29,046 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:29,046 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:29,046 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 22:55:29,046 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:29,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:29,047 INFO L85 PathProgramCache]: Analyzing trace with hash -216434858, now seen corresponding path program 1 times [2021-12-06 22:55:29,047 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:29,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1475560387] [2021-12-06 22:55:29,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:29,047 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:29,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:55:29,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 22:55:29,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:55:29,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-06 22:55:29,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,109 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:55:29,109 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:29,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1475560387] [2021-12-06 22:55:29,109 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1475560387] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:55:29,110 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:55:29,110 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:55:29,110 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1604465342] [2021-12-06 22:55:29,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:55:29,110 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:55:29,110 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:29,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:55:29,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:55:29,111 INFO L87 Difference]: Start difference. First operand 81 states and 102 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 22:55:29,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:29,231 INFO L93 Difference]: Finished difference Result 238 states and 300 transitions. [2021-12-06 22:55:29,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:55:29,231 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 48 [2021-12-06 22:55:29,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:29,233 INFO L225 Difference]: With dead ends: 238 [2021-12-06 22:55:29,233 INFO L226 Difference]: Without dead ends: 165 [2021-12-06 22:55:29,234 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:55:29,235 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 187 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 310 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:29,235 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 310 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:55:29,236 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2021-12-06 22:55:29,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2021-12-06 22:55:29,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 122 states have (on average 1.2540983606557377) internal successors, (153), 130 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-06 22:55:29,251 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 194 transitions. [2021-12-06 22:55:29,252 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 194 transitions. Word has length 48 [2021-12-06 22:55:29,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:29,252 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 194 transitions. [2021-12-06 22:55:29,252 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 22:55:29,252 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2021-12-06 22:55:29,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-12-06 22:55:29,254 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:29,254 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:29,254 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 22:55:29,254 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:29,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:29,254 INFO L85 PathProgramCache]: Analyzing trace with hash 1219044606, now seen corresponding path program 1 times [2021-12-06 22:55:29,255 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:29,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1948587080] [2021-12-06 22:55:29,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:29,255 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:29,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:55:29,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 22:55:29,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:55:29,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-06 22:55:29,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,335 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-06 22:55:29,336 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:29,336 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1948587080] [2021-12-06 22:55:29,336 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1948587080] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:55:29,336 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:55:29,336 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 22:55:29,336 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1737349956] [2021-12-06 22:55:29,337 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:55:29,337 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 22:55:29,337 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:29,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 22:55:29,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:55:29,338 INFO L87 Difference]: Start difference. First operand 159 states and 194 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 22:55:29,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:29,505 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2021-12-06 22:55:29,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 22:55:29,505 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 54 [2021-12-06 22:55:29,506 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:29,508 INFO L225 Difference]: With dead ends: 322 [2021-12-06 22:55:29,508 INFO L226 Difference]: Without dead ends: 171 [2021-12-06 22:55:29,509 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:55:29,510 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 120 mSDsluCounter, 353 mSDsCounter, 0 mSdLazyCounter, 205 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 455 SdHoareTripleChecker+Invalid, 240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 205 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:29,511 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [127 Valid, 455 Invalid, 240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 205 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:55:29,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2021-12-06 22:55:29,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 157. [2021-12-06 22:55:29,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.225) internal successors, (147), 128 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-06 22:55:29,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 188 transitions. [2021-12-06 22:55:29,531 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 188 transitions. Word has length 54 [2021-12-06 22:55:29,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:29,532 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 188 transitions. [2021-12-06 22:55:29,532 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-06 22:55:29,532 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 188 transitions. [2021-12-06 22:55:29,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-06 22:55:29,534 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:29,535 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:29,535 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 22:55:29,535 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:29,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:29,536 INFO L85 PathProgramCache]: Analyzing trace with hash 175038302, now seen corresponding path program 1 times [2021-12-06 22:55:29,536 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:29,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [164862323] [2021-12-06 22:55:29,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:29,536 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:29,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:55:29,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 22:55:29,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:55:29,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-06 22:55:29,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,601 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:55:29,601 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:29,601 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [164862323] [2021-12-06 22:55:29,601 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [164862323] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:55:29,601 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:55:29,601 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:55:29,602 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1782355872] [2021-12-06 22:55:29,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:55:29,602 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:55:29,602 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:29,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:55:29,603 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:55:29,603 INFO L87 Difference]: Start difference. First operand 157 states and 188 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 22:55:29,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:29,688 INFO L93 Difference]: Finished difference Result 316 states and 385 transitions. [2021-12-06 22:55:29,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:55:29,689 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2021-12-06 22:55:29,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:29,690 INFO L225 Difference]: With dead ends: 316 [2021-12-06 22:55:29,690 INFO L226 Difference]: Without dead ends: 167 [2021-12-06 22:55:29,691 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 22:55:29,692 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 69 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 368 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:29,692 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [74 Valid, 368 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:55:29,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2021-12-06 22:55:29,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 160. [2021-12-06 22:55:29,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 131 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-06 22:55:29,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 191 transitions. [2021-12-06 22:55:29,710 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 191 transitions. Word has length 60 [2021-12-06 22:55:29,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:29,711 INFO L470 AbstractCegarLoop]: Abstraction has 160 states and 191 transitions. [2021-12-06 22:55:29,711 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 22:55:29,711 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 191 transitions. [2021-12-06 22:55:29,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-06 22:55:29,712 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:29,712 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:29,712 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 22:55:29,712 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:29,713 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:29,713 INFO L85 PathProgramCache]: Analyzing trace with hash 2098266336, now seen corresponding path program 1 times [2021-12-06 22:55:29,713 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:29,713 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1508565289] [2021-12-06 22:55:29,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:29,713 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:29,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:55:29,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 22:55:29,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:55:29,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-06 22:55:29,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,773 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:55:29,773 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:29,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1508565289] [2021-12-06 22:55:29,774 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1508565289] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:55:29,774 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:55:29,774 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 22:55:29,774 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [628780846] [2021-12-06 22:55:29,774 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:55:29,775 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 22:55:29,775 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:29,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 22:55:29,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:55:29,776 INFO L87 Difference]: Start difference. First operand 160 states and 191 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 22:55:29,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:29,875 INFO L93 Difference]: Finished difference Result 322 states and 391 transitions. [2021-12-06 22:55:29,876 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:55:29,876 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2021-12-06 22:55:29,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:29,877 INFO L225 Difference]: With dead ends: 322 [2021-12-06 22:55:29,877 INFO L226 Difference]: Without dead ends: 170 [2021-12-06 22:55:29,878 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-12-06 22:55:29,879 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 106 mSDsluCounter, 310 mSDsCounter, 0 mSdLazyCounter, 150 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 400 SdHoareTripleChecker+Invalid, 176 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:29,879 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [112 Valid, 400 Invalid, 176 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:55:29,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2021-12-06 22:55:29,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 162. [2021-12-06 22:55:29,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 125 states have (on average 1.216) internal successors, (152), 133 states have internal predecessors, (152), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-06 22:55:29,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 193 transitions. [2021-12-06 22:55:29,889 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 193 transitions. Word has length 60 [2021-12-06 22:55:29,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:29,890 INFO L470 AbstractCegarLoop]: Abstraction has 162 states and 193 transitions. [2021-12-06 22:55:29,890 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 22:55:29,890 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 193 transitions. [2021-12-06 22:55:29,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-06 22:55:29,891 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:29,891 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:29,891 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 22:55:29,891 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:29,891 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:29,891 INFO L85 PathProgramCache]: Analyzing trace with hash -810497566, now seen corresponding path program 1 times [2021-12-06 22:55:29,892 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:29,892 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529791205] [2021-12-06 22:55:29,892 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:29,892 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:29,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 22:55:29,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 22:55:29,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:55:29,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-06 22:55:29,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:29,948 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:55:29,948 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:29,948 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529791205] [2021-12-06 22:55:29,948 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [529791205] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:55:29,948 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:55:29,948 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:55:29,949 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1129948878] [2021-12-06 22:55:29,949 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:55:29,949 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:55:29,949 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:29,950 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:55:29,950 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:55:29,950 INFO L87 Difference]: Start difference. First operand 162 states and 193 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 22:55:30,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:30,087 INFO L93 Difference]: Finished difference Result 448 states and 559 transitions. [2021-12-06 22:55:30,087 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:55:30,088 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2021-12-06 22:55:30,088 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:30,090 INFO L225 Difference]: With dead ends: 448 [2021-12-06 22:55:30,090 INFO L226 Difference]: Without dead ends: 294 [2021-12-06 22:55:30,091 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:55:30,092 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 216 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:30,093 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [224 Valid, 313 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:55:30,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2021-12-06 22:55:30,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 292. [2021-12-06 22:55:30,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 223 states have (on average 1.201793721973094) internal successors, (268), 235 states have internal predecessors, (268), 36 states have call successors, (36), 31 states have call predecessors, (36), 32 states have return successors, (51), 36 states have call predecessors, (51), 36 states have call successors, (51) [2021-12-06 22:55:30,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 355 transitions. [2021-12-06 22:55:30,116 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 355 transitions. Word has length 60 [2021-12-06 22:55:30,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:30,116 INFO L470 AbstractCegarLoop]: Abstraction has 292 states and 355 transitions. [2021-12-06 22:55:30,117 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-06 22:55:30,117 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 355 transitions. [2021-12-06 22:55:30,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-06 22:55:30,120 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:30,120 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:30,121 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 22:55:30,121 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:30,121 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:30,121 INFO L85 PathProgramCache]: Analyzing trace with hash -1779897540, now seen corresponding path program 1 times [2021-12-06 22:55:30,121 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:30,122 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [593825730] [2021-12-06 22:55:30,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:30,122 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:30,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:55:30,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 22:55:30,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-06 22:55:30,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:55:30,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-06 22:55:30,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,224 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:55:30,224 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:30,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [593825730] [2021-12-06 22:55:30,224 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [593825730] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:55:30,224 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:55:30,225 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-06 22:55:30,225 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1493610071] [2021-12-06 22:55:30,225 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:55:30,225 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-06 22:55:30,225 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:30,226 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-06 22:55:30,226 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-06 22:55:30,226 INFO L87 Difference]: Start difference. First operand 292 states and 355 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-06 22:55:30,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:30,671 INFO L93 Difference]: Finished difference Result 749 states and 945 transitions. [2021-12-06 22:55:30,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2021-12-06 22:55:30,672 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2021-12-06 22:55:30,672 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:30,675 INFO L225 Difference]: With dead ends: 749 [2021-12-06 22:55:30,676 INFO L226 Difference]: Without dead ends: 516 [2021-12-06 22:55:30,677 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 179 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=201, Invalid=611, Unknown=0, NotChecked=0, Total=812 [2021-12-06 22:55:30,678 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 510 mSDsluCounter, 467 mSDsCounter, 0 mSdLazyCounter, 536 mSolverCounterSat, 175 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 515 SdHoareTripleChecker+Valid, 606 SdHoareTripleChecker+Invalid, 711 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 175 IncrementalHoareTripleChecker+Valid, 536 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:30,678 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [515 Valid, 606 Invalid, 711 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [175 Valid, 536 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 22:55:30,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 516 states. [2021-12-06 22:55:30,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 516 to 436. [2021-12-06 22:55:30,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 436 states, 333 states have (on average 1.1891891891891893) internal successors, (396), 352 states have internal predecessors, (396), 53 states have call successors, (53), 44 states have call predecessors, (53), 49 states have return successors, (72), 52 states have call predecessors, (72), 53 states have call successors, (72) [2021-12-06 22:55:30,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 436 states to 436 states and 521 transitions. [2021-12-06 22:55:30,717 INFO L78 Accepts]: Start accepts. Automaton has 436 states and 521 transitions. Word has length 64 [2021-12-06 22:55:30,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:30,718 INFO L470 AbstractCegarLoop]: Abstraction has 436 states and 521 transitions. [2021-12-06 22:55:30,718 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-06 22:55:30,718 INFO L276 IsEmpty]: Start isEmpty. Operand 436 states and 521 transitions. [2021-12-06 22:55:30,720 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2021-12-06 22:55:30,720 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:55:30,720 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:30,720 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 22:55:30,721 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:55:30,721 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:55:30,721 INFO L85 PathProgramCache]: Analyzing trace with hash 2079059227, now seen corresponding path program 1 times [2021-12-06 22:55:30,721 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:55:30,721 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1404701487] [2021-12-06 22:55:30,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:30,722 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:55:30,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:55:30,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:55:30,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:55:30,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-06 22:55:30,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:55:30,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-06 22:55:30,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-06 22:55:30,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 22:55:30,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:55:30,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-06 22:55:30,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,845 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-06 22:55:30,845 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:55:30,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1404701487] [2021-12-06 22:55:30,845 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1404701487] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:55:30,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [919623091] [2021-12-06 22:55:30,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:55:30,846 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:55:30,846 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:55:30,846 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:55:30,847 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 22:55:30,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:55:30,919 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 22:55:30,924 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:55:31,125 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:55:31,125 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:55:31,295 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-06 22:55:31,295 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [919623091] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:55:31,295 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:55:31,295 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-12-06 22:55:31,295 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1334010331] [2021-12-06 22:55:31,295 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:55:31,296 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-12-06 22:55:31,296 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:55:31,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-12-06 22:55:31,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-12-06 22:55:31,297 INFO L87 Difference]: Start difference. First operand 436 states and 521 transitions. Second operand has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2021-12-06 22:55:31,861 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:55:31,861 INFO L93 Difference]: Finished difference Result 915 states and 1116 transitions. [2021-12-06 22:55:31,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-06 22:55:31,862 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) Word has length 108 [2021-12-06 22:55:31,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:55:31,862 INFO L225 Difference]: With dead ends: 915 [2021-12-06 22:55:31,862 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 22:55:31,864 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 282 GetRequests, 243 SyntacticMatches, 1 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 336 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=275, Invalid=1285, Unknown=0, NotChecked=0, Total=1560 [2021-12-06 22:55:31,865 INFO L933 BasicCegarLoop]: 221 mSDtfsCounter, 403 mSDsluCounter, 1161 mSDsCounter, 0 mSdLazyCounter, 1023 mSolverCounterSat, 164 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 404 SdHoareTripleChecker+Valid, 1382 SdHoareTripleChecker+Invalid, 1187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 164 IncrementalHoareTripleChecker+Valid, 1023 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 22:55:31,865 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [404 Valid, 1382 Invalid, 1187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [164 Valid, 1023 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 22:55:31,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 22:55:31,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 22:55:31,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:55:31,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 22:55:31,866 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 108 [2021-12-06 22:55:31,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:55:31,866 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 22:55:31,866 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2021-12-06 22:55:31,866 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 22:55:31,866 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 22:55:31,868 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 22:55:31,890 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 22:55:32,069 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-06 22:55:32,073 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 22:55:34,378 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 748 754) no Hoare annotation was computed. [2021-12-06 22:55:34,378 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 748 754) the Hoare annotation is: true [2021-12-06 22:55:34,378 INFO L858 garLoopResultBuilder]: For program point L607-1(lines 603 614) no Hoare annotation was computed. [2021-12-06 22:55:34,378 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 603 614) the Hoare annotation is: true [2021-12-06 22:55:34,378 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 603 614) no Hoare annotation was computed. [2021-12-06 22:55:34,378 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-12-06 22:55:34,378 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 721 747) no Hoare annotation was computed. [2021-12-06 22:55:34,379 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse4) .cse2 .cse3)))) [2021-12-06 22:55:34,379 INFO L854 garLoopResultBuilder]: At program point L837(lines 832 839) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4) .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4)))) [2021-12-06 22:55:34,379 INFO L854 garLoopResultBuilder]: At program point L796(line 796) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse0 .cse1 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 22:55:34,379 INFO L854 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse0 .cse1 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 22:55:34,379 INFO L858 garLoopResultBuilder]: For program point L788-1(line 788) no Hoare annotation was computed. [2021-12-06 22:55:34,379 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2 .cse3) (or .cse0 .cse2 .cse3 .cse4) (let ((.cse6 (<= ~waterLevel~0 2))) (or .cse5 (and .cse1 .cse6 .cse7) .cse2 .cse3 (and .cse8 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse5 (and .cse8 .cse9 .cse7) .cse2 .cse3 .cse4 (and .cse1 .cse9 .cse7))))) [2021-12-06 22:55:34,379 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-12-06 22:55:34,379 INFO L854 garLoopResultBuilder]: At program point L652(lines 647 655) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse1 .cse2) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2) .cse3 .cse4)) (or .cse0 .cse3 .cse4 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse5) (let ((.cse7 (<= ~waterLevel~0 2))) (or .cse6 (and .cse1 .cse7 .cse8) .cse3 .cse4 (and .cse9 .cse7 .cse8) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse10 (= ~waterLevel~0 1))) (or .cse6 (and .cse9 .cse10 .cse8) .cse3 .cse4 .cse5 (and .cse1 .cse10 .cse8))))) [2021-12-06 22:55:34,379 INFO L858 garLoopResultBuilder]: For program point L710(line 710) no Hoare annotation was computed. [2021-12-06 22:55:34,380 INFO L854 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse2 .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 22:55:34,380 INFO L854 garLoopResultBuilder]: At program point L801-1(lines 782 806) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 .cse1) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse1) .cse2 .cse3)) (let ((.cse5 (<= ~waterLevel~0 2))) (or .cse4 (and .cse0 .cse5 .cse6) .cse2 .cse3 (and .cse7 .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse8 (= ~waterLevel~0 1))) (or .cse4 (and .cse7 .cse8 .cse6) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (and .cse0 .cse8 .cse6))))) [2021-12-06 22:55:34,380 INFO L858 garLoopResultBuilder]: For program point L735-1(lines 735 741) no Hoare annotation was computed. [2021-12-06 22:55:34,380 INFO L858 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2021-12-06 22:55:34,380 INFO L854 garLoopResultBuilder]: At program point L711(lines 706 713) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 22:55:34,380 INFO L854 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse0 .cse1 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 22:55:34,380 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (and (= ~pumpRunning~0 0) .cse4 .cse5) (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse2)))) [2021-12-06 22:55:34,380 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-12-06 22:55:34,380 INFO L858 garLoopResultBuilder]: For program point L728(lines 728 734) no Hoare annotation was computed. [2021-12-06 22:55:34,380 INFO L858 garLoopResultBuilder]: For program point L728-2(lines 724 746) no Hoare annotation was computed. [2021-12-06 22:55:34,380 INFO L858 garLoopResultBuilder]: For program point L790(lines 790 798) no Hoare annotation was computed. [2021-12-06 22:55:34,381 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-12-06 22:55:34,381 INFO L858 garLoopResultBuilder]: For program point L786(lines 786 803) no Hoare annotation was computed. [2021-12-06 22:55:34,381 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-12-06 22:55:34,381 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 721 747) the Hoare annotation is: (let ((.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (and (= ~pumpRunning~0 0) .cse4 .cse5) (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse2)))) [2021-12-06 22:55:34,381 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not .cse3)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse1 .cse2) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2) .cse3 .cse4)) (let ((.cse6 (= ~waterLevel~0 1))) (or .cse5 (and .cse0 .cse1 .cse6 .cse7 .cse8) .cse3 .cse4 (and .cse9 .cse0 .cse6 .cse7 .cse8) .cse10)) (let ((.cse11 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse11 .cse7 .cse8) .cse5 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse9 .cse0 .cse11 .cse7 .cse8))) (or .cse0 (and (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|) (<= |timeShift_getWaterLevel_#res#1| 2) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse3 .cse4 .cse10)))) [2021-12-06 22:55:34,381 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 721 747) no Hoare annotation was computed. [2021-12-06 22:55:34,381 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 710) no Hoare annotation was computed. [2021-12-06 22:55:34,381 INFO L861 garLoopResultBuilder]: At program point L129(lines 104 133) the Hoare annotation is: true [2021-12-06 22:55:34,381 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 104 133) no Hoare annotation was computed. [2021-12-06 22:55:34,381 INFO L858 garLoopResultBuilder]: For program point L125(line 125) no Hoare annotation was computed. [2021-12-06 22:55:34,381 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 104 133) the Hoare annotation is: true [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point L118(lines 118 122) no Hoare annotation was computed. [2021-12-06 22:55:34,382 INFO L861 garLoopResultBuilder]: At program point L118-1(lines 118 122) the Hoare annotation is: true [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point L115(line 115) no Hoare annotation was computed. [2021-12-06 22:55:34,382 INFO L861 garLoopResultBuilder]: At program point L114-2(lines 114 128) the Hoare annotation is: true [2021-12-06 22:55:34,382 INFO L861 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: true [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point L110-1(line 110) no Hoare annotation was computed. [2021-12-06 22:55:34,382 INFO L854 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse5 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2021-12-06 22:55:34,382 INFO L861 garLoopResultBuilder]: At program point L985(lines 924 989) the Hoare annotation is: true [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point L944(lines 944 950) no Hoare annotation was computed. [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point L944-1(lines 944 950) no Hoare annotation was computed. [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point L936(lines 936 940) no Hoare annotation was computed. [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point L193(lines 193 200) no Hoare annotation was computed. [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point L193-2(lines 193 200) no Hoare annotation was computed. [2021-12-06 22:55:34,382 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 22:55:34,383 INFO L854 garLoopResultBuilder]: At program point L701(lines 696 704) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 22:55:34,383 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 22:55:34,383 INFO L854 garLoopResultBuilder]: At program point L920(lines 915 922) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse5 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2021-12-06 22:55:34,383 INFO L854 garLoopResultBuilder]: At program point L982(lines 933 983) the Hoare annotation is: false [2021-12-06 22:55:34,383 INFO L854 garLoopResultBuilder]: At program point L693(lines 689 695) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 22:55:34,383 INFO L861 garLoopResultBuilder]: At program point L177(lines 169 179) the Hoare annotation is: true [2021-12-06 22:55:34,383 INFO L861 garLoopResultBuilder]: At program point L202(lines 183 205) the Hoare annotation is: true [2021-12-06 22:55:34,383 INFO L854 garLoopResultBuilder]: At program point L165(lines 161 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 22:55:34,383 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 22:55:34,383 INFO L858 garLoopResultBuilder]: For program point L954(lines 954 960) no Hoare annotation was computed. [2021-12-06 22:55:34,383 INFO L858 garLoopResultBuilder]: For program point L954-1(lines 954 960) no Hoare annotation was computed. [2021-12-06 22:55:34,383 INFO L854 garLoopResultBuilder]: At program point L979(lines 934 981) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse5 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2021-12-06 22:55:34,384 INFO L854 garLoopResultBuilder]: At program point L946(line 946) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse5 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2021-12-06 22:55:34,384 INFO L854 garLoopResultBuilder]: At program point L686(lines 682 688) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 22:55:34,384 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 22:55:34,384 INFO L858 garLoopResultBuilder]: For program point L972(lines 972 976) no Hoare annotation was computed. [2021-12-06 22:55:34,384 INFO L854 garLoopResultBuilder]: At program point L972-2(lines 964 977) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse5 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2021-12-06 22:55:34,384 INFO L858 garLoopResultBuilder]: For program point L935(lines 934 981) no Hoare annotation was computed. [2021-12-06 22:55:34,384 INFO L858 garLoopResultBuilder]: For program point L964(lines 964 977) no Hoare annotation was computed. [2021-12-06 22:55:34,384 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 591 602) no Hoare annotation was computed. [2021-12-06 22:55:34,384 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 591 602) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse1 .cse2 .cse3))) [2021-12-06 22:55:34,384 INFO L858 garLoopResultBuilder]: For program point L595-1(lines 591 602) no Hoare annotation was computed. [2021-12-06 22:55:34,384 INFO L858 garLoopResultBuilder]: For program point L764(lines 764 772) no Hoare annotation was computed. [2021-12-06 22:55:34,384 INFO L854 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse2) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2021-12-06 22:55:34,384 INFO L858 garLoopResultBuilder]: For program point L760(lines 760 777) no Hoare annotation was computed. [2021-12-06 22:55:34,385 INFO L858 garLoopResultBuilder]: For program point L822(lines 822 828) no Hoare annotation was computed. [2021-12-06 22:55:34,385 INFO L854 garLoopResultBuilder]: At program point L820(line 820) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) .cse1))) [2021-12-06 22:55:34,385 INFO L854 garLoopResultBuilder]: At program point L822-2(lines 815 831) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) .cse0) .cse1 (and (= ~pumpRunning~0 0) .cse0) .cse2)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 22:55:34,385 INFO L858 garLoopResultBuilder]: For program point L820-1(line 820) no Hoare annotation was computed. [2021-12-06 22:55:34,385 INFO L854 garLoopResultBuilder]: At program point L911(lines 896 914) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse2 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2021-12-06 22:55:34,385 INFO L854 garLoopResultBuilder]: At program point L812(lines 807 814) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2021-12-06 22:55:34,385 INFO L858 garLoopResultBuilder]: For program point L905(lines 905 909) no Hoare annotation was computed. [2021-12-06 22:55:34,385 INFO L858 garLoopResultBuilder]: For program point L905-2(lines 905 909) no Hoare annotation was computed. [2021-12-06 22:55:34,385 INFO L854 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 22:55:34,385 INFO L858 garLoopResultBuilder]: For program point L775-1(lines 756 780) no Hoare annotation was computed. [2021-12-06 22:55:34,385 INFO L858 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2021-12-06 22:55:34,385 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 756 780) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-06 22:55:34,386 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 756 780) no Hoare annotation was computed. [2021-12-06 22:55:34,386 INFO L854 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0)) .cse0 .cse1))) [2021-12-06 22:55:34,386 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 851 859) no Hoare annotation was computed. [2021-12-06 22:55:34,386 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 851 859) the Hoare annotation is: true [2021-12-06 22:55:34,386 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 851 859) no Hoare annotation was computed. [2021-12-06 22:55:34,386 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 840 850) the Hoare annotation is: true [2021-12-06 22:55:34,386 INFO L861 garLoopResultBuilder]: At program point L620(lines 615 623) the Hoare annotation is: true [2021-12-06 22:55:34,386 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 840 850) no Hoare annotation was computed. [2021-12-06 22:55:34,386 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 840 850) no Hoare annotation was computed. [2021-12-06 22:55:34,388 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:34,389 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 22:55:34,412 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 10:55:34 BoogieIcfgContainer [2021-12-06 22:55:34,412 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 22:55:34,412 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 22:55:34,412 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 22:55:34,412 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 22:55:34,413 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:55:28" (3/4) ... [2021-12-06 22:55:34,415 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 22:55:34,419 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 22:55:34,419 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 22:55:34,419 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 22:55:34,420 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 22:55:34,420 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 22:55:34,420 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-06 22:55:34,420 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-06 22:55:34,420 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-06 22:55:34,426 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-12-06 22:55:34,427 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 22:55:34,427 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 22:55:34,428 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 22:55:34,428 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 22:55:34,428 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 22:55:34,429 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 22:55:34,449 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 22:55:34,449 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 22:55:34,449 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 22:55:34,449 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) [2021-12-06 22:55:34,450 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-06 22:55:34,450 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 22:55:34,450 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) [2021-12-06 22:55:34,450 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) && ((((!(\old(pumpRunning) == 0) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-06 22:55:34,451 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2021-12-06 22:55:34,451 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 22:55:34,451 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2021-12-06 22:55:34,451 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2021-12-06 22:55:34,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (1 <= \result && pumpRunning == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2021-12-06 22:55:34,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-12-06 22:55:34,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-12-06 22:55:34,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || ((tmp___0 == 0 && pumpRunning == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2021-12-06 22:55:34,479 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 22:55:34,480 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 22:55:34,480 INFO L158 Benchmark]: Toolchain (without parser) took 6808.34ms. Allocated memory was 102.8MB in the beginning and 123.7MB in the end (delta: 21.0MB). Free memory was 60.1MB in the beginning and 93.9MB in the end (delta: -33.8MB). Peak memory consumption was 53.5MB. Max. memory is 16.1GB. [2021-12-06 22:55:34,481 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 102.8MB. Free memory is still 77.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:55:34,481 INFO L158 Benchmark]: CACSL2BoogieTranslator took 292.28ms. Allocated memory is still 102.8MB. Free memory was 59.9MB in the beginning and 41.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-06 22:55:34,481 INFO L158 Benchmark]: Boogie Procedure Inliner took 34.96ms. Allocated memory is still 102.8MB. Free memory was 40.8MB in the beginning and 38.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 22:55:34,482 INFO L158 Benchmark]: Boogie Preprocessor took 20.52ms. Allocated memory is still 102.8MB. Free memory was 38.3MB in the beginning and 36.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 22:55:34,482 INFO L158 Benchmark]: RCFGBuilder took 385.38ms. Allocated memory is still 102.8MB. Free memory was 36.8MB in the beginning and 65.4MB in the end (delta: -28.7MB). Peak memory consumption was 5.6MB. Max. memory is 16.1GB. [2021-12-06 22:55:34,482 INFO L158 Benchmark]: TraceAbstraction took 6002.10ms. Allocated memory was 102.8MB in the beginning and 123.7MB in the end (delta: 21.0MB). Free memory was 64.7MB in the beginning and 31.9MB in the end (delta: 32.8MB). Peak memory consumption was 62.7MB. Max. memory is 16.1GB. [2021-12-06 22:55:34,483 INFO L158 Benchmark]: Witness Printer took 67.57ms. Allocated memory is still 123.7MB. Free memory was 31.9MB in the beginning and 93.9MB in the end (delta: -62.0MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-06 22:55:34,485 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 102.8MB. Free memory is still 77.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 292.28ms. Allocated memory is still 102.8MB. Free memory was 59.9MB in the beginning and 41.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 34.96ms. Allocated memory is still 102.8MB. Free memory was 40.8MB in the beginning and 38.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 20.52ms. Allocated memory is still 102.8MB. Free memory was 38.3MB in the beginning and 36.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 385.38ms. Allocated memory is still 102.8MB. Free memory was 36.8MB in the beginning and 65.4MB in the end (delta: -28.7MB). Peak memory consumption was 5.6MB. Max. memory is 16.1GB. * TraceAbstraction took 6002.10ms. Allocated memory was 102.8MB in the beginning and 123.7MB in the end (delta: 21.0MB). Free memory was 64.7MB in the beginning and 31.9MB in the end (delta: 32.8MB). Peak memory consumption was 62.7MB. Max. memory is 16.1GB. * Witness Printer took 67.57ms. Allocated memory is still 123.7MB. Free memory was 31.9MB in the beginning and 93.9MB in the end (delta: -62.0MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 710]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.9s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1788 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1750 mSDsluCounter, 4399 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3160 mSDsCounter, 554 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2284 IncrementalHoareTripleChecker+Invalid, 2838 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 554 mSolverCounterUnsat, 1239 mSDtfsCounter, 2284 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 444 GetRequests, 332 SyntacticMatches, 1 SemanticMatches, 111 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 549 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=436occurred in iteration=9, InterpolantAutomatonStates: 104, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 117 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 982 PreInvPairs, 1183 NumberOfFragments, 1857 HoareAnnotationTreeSize, 982 FomulaSimplifications, 813 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 46 FomulaSimplificationsInter, 8689 FormulaSimplificationTreeSizeReductionInter, 1.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 665 NumberOfCodeBlocks, 665 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 761 ConstructedInterpolants, 0 QuantifiedInterpolants, 1506 SizeOfPredicates, 3 NumberOfNonLiveVariables, 501 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 115/141 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 933]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 183]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 647]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 696]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) && ((((!(\old(pumpRunning) == 0) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 807]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (1 <= \result && pumpRunning == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || ((tmp___0 == 0 && pumpRunning == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2021-12-06 22:55:34,536 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f6ae3800-f1e0-42d3-87b3-4a53d7fe334e/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE