./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 22:50:04,012 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 22:50:04,015 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 22:50:04,046 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 22:50:04,047 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 22:50:04,048 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 22:50:04,050 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 22:50:04,053 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 22:50:04,055 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 22:50:04,056 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 22:50:04,057 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 22:50:04,058 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 22:50:04,059 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 22:50:04,060 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 22:50:04,061 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 22:50:04,063 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 22:50:04,064 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 22:50:04,065 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 22:50:04,067 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 22:50:04,070 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 22:50:04,071 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 22:50:04,073 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 22:50:04,074 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 22:50:04,075 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 22:50:04,079 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 22:50:04,079 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 22:50:04,080 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 22:50:04,081 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 22:50:04,081 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 22:50:04,082 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 22:50:04,083 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 22:50:04,084 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 22:50:04,085 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 22:50:04,086 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 22:50:04,087 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 22:50:04,087 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 22:50:04,087 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 22:50:04,088 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 22:50:04,088 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 22:50:04,089 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 22:50:04,089 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 22:50:04,090 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 22:50:04,114 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 22:50:04,114 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 22:50:04,114 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 22:50:04,115 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 22:50:04,115 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 22:50:04,115 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 22:50:04,116 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 22:50:04,116 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 22:50:04,116 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 22:50:04,117 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 22:50:04,117 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 22:50:04,117 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 22:50:04,117 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 22:50:04,117 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 22:50:04,118 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 22:50:04,118 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 22:50:04,118 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 22:50:04,118 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 22:50:04,118 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 22:50:04,118 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 22:50:04,119 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 22:50:04,119 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 22:50:04,119 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 22:50:04,119 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 22:50:04,119 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:50:04,120 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 22:50:04,120 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 22:50:04,120 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 22:50:04,120 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 22:50:04,120 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 22:50:04,120 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 22:50:04,121 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 22:50:04,121 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 22:50:04,121 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 22:50:04,121 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a [2021-12-06 22:50:04,333 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 22:50:04,352 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 22:50:04,354 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 22:50:04,354 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 22:50:04,355 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 22:50:04,356 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2021-12-06 22:50:04,404 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/data/861679f50/8d818a3077914f79bc83750194a69bd7/FLAGc5334389c [2021-12-06 22:50:04,790 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 22:50:04,790 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2021-12-06 22:50:04,802 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/data/861679f50/8d818a3077914f79bc83750194a69bd7/FLAGc5334389c [2021-12-06 22:50:05,147 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/data/861679f50/8d818a3077914f79bc83750194a69bd7 [2021-12-06 22:50:05,148 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 22:50:05,149 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 22:50:05,151 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 22:50:05,151 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 22:50:05,153 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 22:50:05,154 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,154 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5dbf2c05 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05, skipping insertion in model container [2021-12-06 22:50:05,155 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,159 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 22:50:05,193 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:50:05,356 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2021-12-06 22:50:05,445 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:50:05,452 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 22:50:05,465 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2021-12-06 22:50:05,506 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:50:05,520 INFO L208 MainTranslator]: Completed translation [2021-12-06 22:50:05,520 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05 WrapperNode [2021-12-06 22:50:05,520 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 22:50:05,521 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 22:50:05,521 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 22:50:05,521 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 22:50:05,527 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,538 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,561 INFO L137 Inliner]: procedures = 60, calls = 165, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 299 [2021-12-06 22:50:05,561 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 22:50:05,562 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 22:50:05,562 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 22:50:05,562 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 22:50:05,568 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,568 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,571 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,571 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,576 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,580 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,582 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,584 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 22:50:05,585 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 22:50:05,585 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 22:50:05,585 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 22:50:05,586 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (1/1) ... [2021-12-06 22:50:05,592 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:50:05,602 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:50:05,614 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 22:50:05,618 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 22:50:05,653 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 22:50:05,654 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 22:50:05,654 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 22:50:05,654 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 22:50:05,654 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 22:50:05,654 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 22:50:05,654 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 22:50:05,654 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 22:50:05,655 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 22:50:05,655 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 22:50:05,655 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 22:50:05,655 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 22:50:05,655 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 22:50:05,655 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-06 22:50:05,655 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-06 22:50:05,655 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-06 22:50:05,655 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-06 22:50:05,656 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-06 22:50:05,656 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-06 22:50:05,656 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 22:50:05,656 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 22:50:05,656 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 22:50:05,656 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 22:50:05,656 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 22:50:05,728 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 22:50:05,729 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 22:50:05,996 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 22:50:06,003 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 22:50:06,003 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 22:50:06,004 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:50:06 BoogieIcfgContainer [2021-12-06 22:50:06,005 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 22:50:06,006 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 22:50:06,006 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 22:50:06,009 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 22:50:06,009 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 10:50:05" (1/3) ... [2021-12-06 22:50:06,009 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7260c059 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:50:06, skipping insertion in model container [2021-12-06 22:50:06,010 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:05" (2/3) ... [2021-12-06 22:50:06,010 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7260c059 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:50:06, skipping insertion in model container [2021-12-06 22:50:06,010 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:50:06" (3/3) ... [2021-12-06 22:50:06,011 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product63.cil.c [2021-12-06 22:50:06,015 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 22:50:06,015 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 22:50:06,053 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 22:50:06,058 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 22:50:06,059 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 22:50:06,075 INFO L276 IsEmpty]: Start isEmpty. Operand has 117 states, 86 states have (on average 1.3604651162790697) internal successors, (117), 97 states have internal predecessors, (117), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2021-12-06 22:50:06,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-06 22:50:06,082 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:06,083 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:06,083 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:06,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:06,088 INFO L85 PathProgramCache]: Analyzing trace with hash 2028778160, now seen corresponding path program 1 times [2021-12-06 22:50:06,096 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:06,096 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [408421611] [2021-12-06 22:50:06,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:06,097 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:06,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 22:50:06,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 22:50:06,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,291 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:50:06,291 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:06,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [408421611] [2021-12-06 22:50:06,292 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [408421611] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:06,293 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:06,293 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:50:06,295 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [143202961] [2021-12-06 22:50:06,295 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:06,300 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 22:50:06,300 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:06,322 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 22:50:06,322 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:50:06,324 INFO L87 Difference]: Start difference. First operand has 117 states, 86 states have (on average 1.3604651162790697) internal successors, (117), 97 states have internal predecessors, (117), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:50:06,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:06,354 INFO L93 Difference]: Finished difference Result 225 states and 304 transitions. [2021-12-06 22:50:06,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 22:50:06,356 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-06 22:50:06,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:06,364 INFO L225 Difference]: With dead ends: 225 [2021-12-06 22:50:06,364 INFO L226 Difference]: Without dead ends: 108 [2021-12-06 22:50:06,368 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:50:06,371 INFO L933 BasicCegarLoop]: 149 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:06,371 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:50:06,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2021-12-06 22:50:06,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 108. [2021-12-06 22:50:06,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 79 states have (on average 1.3037974683544304) internal successors, (103), 89 states have internal predecessors, (103), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-06 22:50:06,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 140 transitions. [2021-12-06 22:50:06,411 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 140 transitions. Word has length 32 [2021-12-06 22:50:06,411 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:06,412 INFO L470 AbstractCegarLoop]: Abstraction has 108 states and 140 transitions. [2021-12-06 22:50:06,412 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 22:50:06,412 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 140 transitions. [2021-12-06 22:50:06,415 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-12-06 22:50:06,415 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:06,415 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:06,415 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 22:50:06,415 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:06,416 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:06,416 INFO L85 PathProgramCache]: Analyzing trace with hash -257998862, now seen corresponding path program 1 times [2021-12-06 22:50:06,416 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:06,417 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [183370240] [2021-12-06 22:50:06,417 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:06,417 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:06,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:06,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-06 22:50:06,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,492 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:50:06,492 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:06,493 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [183370240] [2021-12-06 22:50:06,493 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [183370240] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:06,493 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:06,493 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:50:06,493 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1559109145] [2021-12-06 22:50:06,493 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:06,494 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:50:06,494 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:06,495 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:50:06,495 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:50:06,495 INFO L87 Difference]: Start difference. First operand 108 states and 140 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:50:06,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:06,530 INFO L93 Difference]: Finished difference Result 307 states and 406 transitions. [2021-12-06 22:50:06,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:50:06,531 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-12-06 22:50:06,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:06,534 INFO L225 Difference]: With dead ends: 307 [2021-12-06 22:50:06,534 INFO L226 Difference]: Without dead ends: 207 [2021-12-06 22:50:06,536 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:50:06,537 INFO L933 BasicCegarLoop]: 170 mSDtfsCounter, 115 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:06,537 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [115 Valid, 299 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:50:06,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2021-12-06 22:50:06,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 204. [2021-12-06 22:50:06,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 147 states have (on average 1.3197278911564625) internal successors, (194), 166 states have internal predecessors, (194), 38 states have call successors, (38), 20 states have call predecessors, (38), 18 states have return successors, (36), 25 states have call predecessors, (36), 36 states have call successors, (36) [2021-12-06 22:50:06,562 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 268 transitions. [2021-12-06 22:50:06,562 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 268 transitions. Word has length 37 [2021-12-06 22:50:06,563 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:06,563 INFO L470 AbstractCegarLoop]: Abstraction has 204 states and 268 transitions. [2021-12-06 22:50:06,563 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:50:06,563 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 268 transitions. [2021-12-06 22:50:06,566 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-06 22:50:06,566 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:06,566 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:06,566 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 22:50:06,567 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:06,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:06,567 INFO L85 PathProgramCache]: Analyzing trace with hash 702056680, now seen corresponding path program 1 times [2021-12-06 22:50:06,567 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:06,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [688201458] [2021-12-06 22:50:06,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:06,568 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:06,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-06 22:50:06,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-06 22:50:06,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,663 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-06 22:50:06,663 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:06,663 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [688201458] [2021-12-06 22:50:06,664 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [688201458] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:06,664 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:06,664 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:50:06,664 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1218156595] [2021-12-06 22:50:06,664 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:06,664 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:50:06,665 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:06,665 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:50:06,665 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:50:06,665 INFO L87 Difference]: Start difference. First operand 204 states and 268 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:50:06,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:06,826 INFO L93 Difference]: Finished difference Result 538 states and 751 transitions. [2021-12-06 22:50:06,826 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 22:50:06,826 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2021-12-06 22:50:06,827 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:06,832 INFO L225 Difference]: With dead ends: 538 [2021-12-06 22:50:06,832 INFO L226 Difference]: Without dead ends: 342 [2021-12-06 22:50:06,836 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:50:06,837 INFO L933 BasicCegarLoop]: 159 mSDtfsCounter, 102 mSDsluCounter, 522 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 681 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:06,838 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [104 Valid, 681 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:50:06,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 342 states. [2021-12-06 22:50:06,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 342 to 329. [2021-12-06 22:50:06,879 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 329 states, 240 states have (on average 1.2666666666666666) internal successors, (304), 259 states have internal predecessors, (304), 54 states have call successors, (54), 38 states have call predecessors, (54), 34 states have return successors, (70), 45 states have call predecessors, (70), 50 states have call successors, (70) [2021-12-06 22:50:06,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 329 states to 329 states and 428 transitions. [2021-12-06 22:50:06,884 INFO L78 Accepts]: Start accepts. Automaton has 329 states and 428 transitions. Word has length 41 [2021-12-06 22:50:06,884 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:06,884 INFO L470 AbstractCegarLoop]: Abstraction has 329 states and 428 transitions. [2021-12-06 22:50:06,885 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 22:50:06,885 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 428 transitions. [2021-12-06 22:50:06,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-06 22:50:06,888 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:06,889 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:06,889 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 22:50:06,889 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:06,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:06,890 INFO L85 PathProgramCache]: Analyzing trace with hash 1444776659, now seen corresponding path program 1 times [2021-12-06 22:50:06,890 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:06,891 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [704753070] [2021-12-06 22:50:06,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:06,891 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:06,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:06,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-06 22:50:06,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:06,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:50:06,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-06 22:50:06,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:06,985 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:50:06,985 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:06,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [704753070] [2021-12-06 22:50:06,986 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [704753070] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:06,986 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:06,986 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:50:06,986 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414787981] [2021-12-06 22:50:06,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:06,987 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:50:06,987 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:06,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:50:06,987 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:50:06,988 INFO L87 Difference]: Start difference. First operand 329 states and 428 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:50:07,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:07,180 INFO L93 Difference]: Finished difference Result 746 states and 1031 transitions. [2021-12-06 22:50:07,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:50:07,181 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 64 [2021-12-06 22:50:07,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:07,186 INFO L225 Difference]: With dead ends: 746 [2021-12-06 22:50:07,187 INFO L226 Difference]: Without dead ends: 425 [2021-12-06 22:50:07,189 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 22:50:07,191 INFO L933 BasicCegarLoop]: 128 mSDtfsCounter, 86 mSDsluCounter, 395 mSDsCounter, 0 mSdLazyCounter, 154 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 523 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:07,192 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [91 Valid, 523 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 154 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:50:07,194 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2021-12-06 22:50:07,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 389. [2021-12-06 22:50:07,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 389 states, 286 states have (on average 1.2517482517482517) internal successors, (358), 305 states have internal predecessors, (358), 58 states have call successors, (58), 38 states have call predecessors, (58), 44 states have return successors, (92), 57 states have call predecessors, (92), 54 states have call successors, (92) [2021-12-06 22:50:07,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 389 states to 389 states and 508 transitions. [2021-12-06 22:50:07,236 INFO L78 Accepts]: Start accepts. Automaton has 389 states and 508 transitions. Word has length 64 [2021-12-06 22:50:07,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:07,237 INFO L470 AbstractCegarLoop]: Abstraction has 389 states and 508 transitions. [2021-12-06 22:50:07,237 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:50:07,237 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 508 transitions. [2021-12-06 22:50:07,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-06 22:50:07,240 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:07,240 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:07,240 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 22:50:07,241 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:07,241 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:07,241 INFO L85 PathProgramCache]: Analyzing trace with hash 968830382, now seen corresponding path program 1 times [2021-12-06 22:50:07,241 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:07,242 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1738968576] [2021-12-06 22:50:07,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:07,242 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:07,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 22:50:07,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 22:50:07,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:07,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:50:07,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-06 22:50:07,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,313 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:50:07,313 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:07,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1738968576] [2021-12-06 22:50:07,314 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1738968576] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:07,314 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:07,314 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 22:50:07,314 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2090904620] [2021-12-06 22:50:07,314 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:07,315 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 22:50:07,315 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:07,315 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 22:50:07,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 22:50:07,316 INFO L87 Difference]: Start difference. First operand 389 states and 508 transitions. Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:50:07,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:07,421 INFO L93 Difference]: Finished difference Result 657 states and 826 transitions. [2021-12-06 22:50:07,422 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 22:50:07,422 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2021-12-06 22:50:07,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:07,424 INFO L225 Difference]: With dead ends: 657 [2021-12-06 22:50:07,424 INFO L226 Difference]: Without dead ends: 355 [2021-12-06 22:50:07,426 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 22:50:07,427 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 83 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 66 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 66 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:07,428 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [94 Valid, 238 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 66 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:50:07,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2021-12-06 22:50:07,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 353. [2021-12-06 22:50:07,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 353 states, 262 states have (on average 1.2595419847328244) internal successors, (330), 281 states have internal predecessors, (330), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2021-12-06 22:50:07,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 444 transitions. [2021-12-06 22:50:07,454 INFO L78 Accepts]: Start accepts. Automaton has 353 states and 444 transitions. Word has length 60 [2021-12-06 22:50:07,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:07,454 INFO L470 AbstractCegarLoop]: Abstraction has 353 states and 444 transitions. [2021-12-06 22:50:07,455 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:50:07,455 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 444 transitions. [2021-12-06 22:50:07,456 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-06 22:50:07,456 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:07,457 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:07,457 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 22:50:07,457 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:07,457 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:07,458 INFO L85 PathProgramCache]: Analyzing trace with hash -1463987243, now seen corresponding path program 1 times [2021-12-06 22:50:07,458 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:07,458 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1899019616] [2021-12-06 22:50:07,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:07,458 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:07,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:07,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-06 22:50:07,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:07,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:50:07,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-06 22:50:07,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,547 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:50:07,547 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:07,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1899019616] [2021-12-06 22:50:07,547 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1899019616] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:07,547 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:07,548 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:50:07,548 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1301102636] [2021-12-06 22:50:07,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:07,548 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:50:07,548 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:07,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:50:07,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:50:07,550 INFO L87 Difference]: Start difference. First operand 353 states and 444 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:50:07,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:07,681 INFO L93 Difference]: Finished difference Result 716 states and 927 transitions. [2021-12-06 22:50:07,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:50:07,682 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 64 [2021-12-06 22:50:07,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:07,685 INFO L225 Difference]: With dead ends: 716 [2021-12-06 22:50:07,685 INFO L226 Difference]: Without dead ends: 371 [2021-12-06 22:50:07,687 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:50:07,688 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 83 mSDsluCounter, 245 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 360 SdHoareTripleChecker+Invalid, 131 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:07,689 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [89 Valid, 360 Invalid, 131 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:50:07,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2021-12-06 22:50:07,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 357. [2021-12-06 22:50:07,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 357 states, 266 states have (on average 1.255639097744361) internal successors, (334), 285 states have internal predecessors, (334), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2021-12-06 22:50:07,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 357 states to 357 states and 448 transitions. [2021-12-06 22:50:07,717 INFO L78 Accepts]: Start accepts. Automaton has 357 states and 448 transitions. Word has length 64 [2021-12-06 22:50:07,717 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:07,717 INFO L470 AbstractCegarLoop]: Abstraction has 357 states and 448 transitions. [2021-12-06 22:50:07,717 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 22:50:07,718 INFO L276 IsEmpty]: Start isEmpty. Operand 357 states and 448 transitions. [2021-12-06 22:50:07,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-06 22:50:07,719 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:07,719 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:07,719 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 22:50:07,719 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:07,720 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:07,720 INFO L85 PathProgramCache]: Analyzing trace with hash -762387369, now seen corresponding path program 1 times [2021-12-06 22:50:07,720 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:07,720 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [308204710] [2021-12-06 22:50:07,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:07,720 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:07,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:07,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-06 22:50:07,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:07,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:50:07,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-06 22:50:07,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,805 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:50:07,805 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:07,805 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [308204710] [2021-12-06 22:50:07,805 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [308204710] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:07,805 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:07,805 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:50:07,805 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [375366020] [2021-12-06 22:50:07,806 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:07,806 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:50:07,806 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:07,806 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:50:07,807 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:50:07,807 INFO L87 Difference]: Start difference. First operand 357 states and 448 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-06 22:50:08,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:08,012 INFO L93 Difference]: Finished difference Result 998 states and 1301 transitions. [2021-12-06 22:50:08,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:50:08,013 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2021-12-06 22:50:08,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:08,016 INFO L225 Difference]: With dead ends: 998 [2021-12-06 22:50:08,017 INFO L226 Difference]: Without dead ends: 649 [2021-12-06 22:50:08,018 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:50:08,019 INFO L933 BasicCegarLoop]: 171 mSDtfsCounter, 256 mSDsluCounter, 217 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 264 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:08,020 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [264 Valid, 388 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 22:50:08,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 649 states. [2021-12-06 22:50:08,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 649 to 642. [2021-12-06 22:50:08,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 642 states, 477 states have (on average 1.2243186582809225) internal successors, (584), 505 states have internal predecessors, (584), 87 states have call successors, (87), 71 states have call predecessors, (87), 77 states have return successors, (139), 88 states have call predecessors, (139), 87 states have call successors, (139) [2021-12-06 22:50:08,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 642 states to 642 states and 810 transitions. [2021-12-06 22:50:08,053 INFO L78 Accepts]: Start accepts. Automaton has 642 states and 810 transitions. Word has length 64 [2021-12-06 22:50:08,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:08,054 INFO L470 AbstractCegarLoop]: Abstraction has 642 states and 810 transitions. [2021-12-06 22:50:08,054 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-06 22:50:08,054 INFO L276 IsEmpty]: Start isEmpty. Operand 642 states and 810 transitions. [2021-12-06 22:50:08,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-12-06 22:50:08,056 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:08,056 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:08,057 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 22:50:08,057 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:08,057 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:08,057 INFO L85 PathProgramCache]: Analyzing trace with hash -480731343, now seen corresponding path program 1 times [2021-12-06 22:50:08,057 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:08,057 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [624901944] [2021-12-06 22:50:08,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:08,057 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:08,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:08,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:08,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:08,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-06 22:50:08,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:08,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-06 22:50:08,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:08,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:08,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:08,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:50:08,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:08,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-06 22:50:08,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:08,187 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 22:50:08,188 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:08,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [624901944] [2021-12-06 22:50:08,188 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [624901944] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:08,188 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:08,188 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-06 22:50:08,188 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1783082621] [2021-12-06 22:50:08,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:08,189 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-06 22:50:08,189 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:08,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-06 22:50:08,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-06 22:50:08,189 INFO L87 Difference]: Start difference. First operand 642 states and 810 transitions. Second operand has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-06 22:50:09,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:09,042 INFO L93 Difference]: Finished difference Result 1757 states and 2334 transitions. [2021-12-06 22:50:09,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-06 22:50:09,043 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) Word has length 68 [2021-12-06 22:50:09,043 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:09,050 INFO L225 Difference]: With dead ends: 1757 [2021-12-06 22:50:09,050 INFO L226 Difference]: Without dead ends: 1236 [2021-12-06 22:50:09,053 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 285 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-12-06 22:50:09,054 INFO L933 BasicCegarLoop]: 167 mSDtfsCounter, 880 mSDsluCounter, 436 mSDsCounter, 0 mSdLazyCounter, 663 mSolverCounterSat, 366 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 888 SdHoareTripleChecker+Valid, 603 SdHoareTripleChecker+Invalid, 1029 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 366 IncrementalHoareTripleChecker+Valid, 663 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:09,054 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [888 Valid, 603 Invalid, 1029 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [366 Valid, 663 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-06 22:50:09,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1236 states. [2021-12-06 22:50:09,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1236 to 1082. [2021-12-06 22:50:09,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1082 states, 802 states have (on average 1.2244389027431422) internal successors, (982), 856 states have internal predecessors, (982), 148 states have call successors, (148), 112 states have call predecessors, (148), 131 states have return successors, (238), 147 states have call predecessors, (238), 148 states have call successors, (238) [2021-12-06 22:50:09,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1082 states to 1082 states and 1368 transitions. [2021-12-06 22:50:09,106 INFO L78 Accepts]: Start accepts. Automaton has 1082 states and 1368 transitions. Word has length 68 [2021-12-06 22:50:09,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:09,106 INFO L470 AbstractCegarLoop]: Abstraction has 1082 states and 1368 transitions. [2021-12-06 22:50:09,106 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-06 22:50:09,107 INFO L276 IsEmpty]: Start isEmpty. Operand 1082 states and 1368 transitions. [2021-12-06 22:50:09,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-06 22:50:09,109 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:09,109 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:09,109 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 22:50:09,110 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:09,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:09,110 INFO L85 PathProgramCache]: Analyzing trace with hash -608570004, now seen corresponding path program 1 times [2021-12-06 22:50:09,110 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:09,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1462949142] [2021-12-06 22:50:09,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:09,110 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:09,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:09,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 22:50:09,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:09,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-06 22:50:09,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:09,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:50:09,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2021-12-06 22:50:09,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 22:50:09,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,199 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-06 22:50:09,199 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:09,199 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1462949142] [2021-12-06 22:50:09,200 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1462949142] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:09,200 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:09,200 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 22:50:09,200 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1608642903] [2021-12-06 22:50:09,200 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:09,201 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 22:50:09,201 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:09,201 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 22:50:09,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:50:09,202 INFO L87 Difference]: Start difference. First operand 1082 states and 1368 transitions. Second operand has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-12-06 22:50:09,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:09,536 INFO L93 Difference]: Finished difference Result 1311 states and 1649 transitions. [2021-12-06 22:50:09,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-06 22:50:09,537 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 98 [2021-12-06 22:50:09,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:09,541 INFO L225 Difference]: With dead ends: 1311 [2021-12-06 22:50:09,541 INFO L226 Difference]: Without dead ends: 537 [2021-12-06 22:50:09,544 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-06 22:50:09,545 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 277 mSDsluCounter, 259 mSDsCounter, 0 mSdLazyCounter, 280 mSolverCounterSat, 97 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 286 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 97 IncrementalHoareTripleChecker+Valid, 280 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:09,546 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [286 Valid, 415 Invalid, 377 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [97 Valid, 280 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 22:50:09,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2021-12-06 22:50:09,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 493. [2021-12-06 22:50:09,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 493 states, 366 states have (on average 1.1830601092896176) internal successors, (433), 389 states have internal predecessors, (433), 66 states have call successors, (66), 50 states have call predecessors, (66), 60 states have return successors, (108), 66 states have call predecessors, (108), 66 states have call successors, (108) [2021-12-06 22:50:09,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 493 states to 493 states and 607 transitions. [2021-12-06 22:50:09,586 INFO L78 Accepts]: Start accepts. Automaton has 493 states and 607 transitions. Word has length 98 [2021-12-06 22:50:09,586 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:09,586 INFO L470 AbstractCegarLoop]: Abstraction has 493 states and 607 transitions. [2021-12-06 22:50:09,587 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-12-06 22:50:09,587 INFO L276 IsEmpty]: Start isEmpty. Operand 493 states and 607 transitions. [2021-12-06 22:50:09,589 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-12-06 22:50:09,589 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:09,589 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:09,590 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 22:50:09,590 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:09,590 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:09,590 INFO L85 PathProgramCache]: Analyzing trace with hash 115908773, now seen corresponding path program 1 times [2021-12-06 22:50:09,591 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:09,591 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1216426734] [2021-12-06 22:50:09,591 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:09,591 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:09,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:09,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 22:50:09,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:09,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-06 22:50:09,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:09,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 22:50:09,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-06 22:50:09,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-12-06 22:50:09,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-12-06 22:50:09,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:50:09,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:09,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-06 22:50:09,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,752 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 20 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-06 22:50:09,753 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:09,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1216426734] [2021-12-06 22:50:09,753 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1216426734] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:50:09,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1336223445] [2021-12-06 22:50:09,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:09,754 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:50:09,754 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:50:09,755 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:50:09,761 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 22:50:09,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:09,860 INFO L263 TraceCheckSpWp]: Trace formula consists of 535 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 22:50:09,867 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:50:10,143 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 30 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 22:50:10,144 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:50:10,394 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-06 22:50:10,395 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1336223445] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:50:10,395 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:50:10,395 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-06 22:50:10,395 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [996032968] [2021-12-06 22:50:10,395 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:50:10,396 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-06 22:50:10,396 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:10,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-06 22:50:10,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:50:10,397 INFO L87 Difference]: Start difference. First operand 493 states and 607 transitions. Second operand has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2021-12-06 22:50:11,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:11,101 INFO L93 Difference]: Finished difference Result 1004 states and 1261 transitions. [2021-12-06 22:50:11,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2021-12-06 22:50:11,102 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) Word has length 121 [2021-12-06 22:50:11,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:11,102 INFO L225 Difference]: With dead ends: 1004 [2021-12-06 22:50:11,103 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 22:50:11,105 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 311 GetRequests, 273 SyntacticMatches, 1 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 324 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=345, Invalid=1137, Unknown=0, NotChecked=0, Total=1482 [2021-12-06 22:50:11,106 INFO L933 BasicCegarLoop]: 224 mSDtfsCounter, 417 mSDsluCounter, 726 mSDsCounter, 0 mSdLazyCounter, 808 mSolverCounterSat, 215 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 420 SdHoareTripleChecker+Valid, 950 SdHoareTripleChecker+Invalid, 1023 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 215 IncrementalHoareTripleChecker+Valid, 808 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:11,106 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [420 Valid, 950 Invalid, 1023 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [215 Valid, 808 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 22:50:11,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 22:50:11,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 22:50:11,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 22:50:11,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 22:50:11,107 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 121 [2021-12-06 22:50:11,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:11,107 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 22:50:11,108 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2021-12-06 22:50:11,108 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 22:50:11,108 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 22:50:11,110 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 22:50:11,132 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 22:50:11,313 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-06 22:50:11,315 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 22:50:14,823 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 466 473) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 2 ~waterLevel~0)) .cse1 (= 0 ~systemActive~0)) (or .cse0 (not (= 1 ~systemActive~0)) .cse1))) [2021-12-06 22:50:14,824 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 466 473) no Hoare annotation was computed. [2021-12-06 22:50:14,824 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 466 473) no Hoare annotation was computed. [2021-12-06 22:50:14,824 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 356 362) no Hoare annotation was computed. [2021-12-06 22:50:14,824 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 356 362) the Hoare annotation is: true [2021-12-06 22:50:14,824 INFO L854 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 22:50:14,824 INFO L858 garLoopResultBuilder]: For program point L409-1(lines 390 414) no Hoare annotation was computed. [2021-12-06 22:50:14,824 INFO L854 garLoopResultBuilder]: At program point L564(lines 549 567) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 22:50:14,824 INFO L858 garLoopResultBuilder]: For program point L558(lines 558 562) no Hoare annotation was computed. [2021-12-06 22:50:14,824 INFO L858 garLoopResultBuilder]: For program point L558-2(lines 558 562) no Hoare annotation was computed. [2021-12-06 22:50:14,824 INFO L854 garLoopResultBuilder]: At program point L682(lines 677 685) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 22:50:14,825 INFO L854 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 22:50:14,825 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 390 414) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-06 22:50:14,825 INFO L854 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 22:50:14,825 INFO L858 garLoopResultBuilder]: For program point L398(lines 398 406) no Hoare annotation was computed. [2021-12-06 22:50:14,825 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 390 414) no Hoare annotation was computed. [2021-12-06 22:50:14,825 INFO L858 garLoopResultBuilder]: For program point L394(lines 394 411) no Hoare annotation was computed. [2021-12-06 22:50:14,825 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 485 493) no Hoare annotation was computed. [2021-12-06 22:50:14,825 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 485 493) the Hoare annotation is: true [2021-12-06 22:50:14,825 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 485 493) no Hoare annotation was computed. [2021-12-06 22:50:14,826 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 610 621) the Hoare annotation is: true [2021-12-06 22:50:14,826 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 610 621) no Hoare annotation was computed. [2021-12-06 22:50:14,826 INFO L858 garLoopResultBuilder]: For program point L614-1(lines 610 621) no Hoare annotation was computed. [2021-12-06 22:50:14,826 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 222 251) no Hoare annotation was computed. [2021-12-06 22:50:14,826 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 222 251) the Hoare annotation is: true [2021-12-06 22:50:14,826 INFO L861 garLoopResultBuilder]: At program point L247(lines 222 251) the Hoare annotation is: true [2021-12-06 22:50:14,826 INFO L858 garLoopResultBuilder]: For program point L243(line 243) no Hoare annotation was computed. [2021-12-06 22:50:14,826 INFO L858 garLoopResultBuilder]: For program point L236(lines 236 240) no Hoare annotation was computed. [2021-12-06 22:50:14,826 INFO L861 garLoopResultBuilder]: At program point L236-1(lines 236 240) the Hoare annotation is: true [2021-12-06 22:50:14,826 INFO L858 garLoopResultBuilder]: For program point L233(line 233) no Hoare annotation was computed. [2021-12-06 22:50:14,826 INFO L861 garLoopResultBuilder]: At program point L232-2(lines 232 246) the Hoare annotation is: true [2021-12-06 22:50:14,827 INFO L861 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: true [2021-12-06 22:50:14,827 INFO L858 garLoopResultBuilder]: For program point L228-1(line 228) no Hoare annotation was computed. [2021-12-06 22:50:14,827 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-12-06 22:50:14,827 INFO L854 garLoopResultBuilder]: At program point L659(lines 654 662) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (and .cse7 .cse10)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= 0 ~systemActive~0))) (.cse11 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4))) (or .cse8 .cse9 .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse10) .cse5) (or .cse8 .cse0 .cse5 .cse11 .cse6) (or .cse8 .cse9 .cse5 .cse12) (or .cse8 .cse5 .cse12 .cse11 .cse6) (let ((.cse13 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse7 .cse13 .cse4) .cse5 (and .cse2 .cse13 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))))) [2021-12-06 22:50:14,827 INFO L858 garLoopResultBuilder]: For program point L424(lines 424 432) no Hoare annotation was computed. [2021-12-06 22:50:14,827 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 329 355) no Hoare annotation was computed. [2021-12-06 22:50:14,827 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse6)) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0))) (or .cse4 .cse2 .cse5 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-06 22:50:14,827 INFO L858 garLoopResultBuilder]: For program point L420(lines 420 437) no Hoare annotation was computed. [2021-12-06 22:50:14,828 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0))) (let ((.cse9 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse10 (not (= 0 ~systemActive~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4))) (or .cse8 .cse9 .cse0 .cse5) (or .cse8 .cse5 .cse10 .cse6) (or .cse8 .cse9 .cse5 .cse10) (or .cse8 .cse0 .cse5 .cse6) (let ((.cse11 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse7 .cse11 .cse4) .cse5 (and .cse2 .cse11 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))))) [2021-12-06 22:50:14,828 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-12-06 22:50:14,828 INFO L858 garLoopResultBuilder]: For program point L144(line 144) no Hoare annotation was computed. [2021-12-06 22:50:14,828 INFO L858 garLoopResultBuilder]: For program point L590(lines 590 594) no Hoare annotation was computed. [2021-12-06 22:50:14,828 INFO L854 garLoopResultBuilder]: At program point L590-2(lines 586 597) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 .cse1 (and .cse4 (<= ~waterLevel~0 2) .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1) (or .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:50:14,828 INFO L858 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2021-12-06 22:50:14,828 INFO L854 garLoopResultBuilder]: At program point L145(lines 140 147) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 .cse0 .cse2))) [2021-12-06 22:50:14,829 INFO L854 garLoopResultBuilder]: At program point L430(line 430) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 .cse1 (and .cse4 (<= ~waterLevel~0 2) .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1) (or .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:50:14,829 INFO L854 garLoopResultBuilder]: At program point L426(line 426) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 .cse1 (and .cse4 (<= ~waterLevel~0 2) .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1) (or .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:50:14,829 INFO L854 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 .cse1 (and .cse4 (<= ~waterLevel~0 2) .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1) (or .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 22:50:14,829 INFO L858 garLoopResultBuilder]: For program point L422-1(line 422) no Hoare annotation was computed. [2021-12-06 22:50:14,829 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0))) (or .cse2 .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-12-06 22:50:14,829 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-12-06 22:50:14,829 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-12-06 22:50:14,829 INFO L854 garLoopResultBuilder]: At program point L435(line 435) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2) (or .cse1 .cse3 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse3 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 (not (= 0 ~systemActive~0))))) [2021-12-06 22:50:14,830 INFO L854 garLoopResultBuilder]: At program point L435-1(lines 416 440) the Hoare annotation is: (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 (not (<= 2 |old(~waterLevel~0)|)) (and .cse6 .cse3 .cse4))) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse7 (and .cse6 .cse8) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse8) .cse5)) (or .cse7 .cse5 (not (= 0 ~systemActive~0))) (let ((.cse9 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse6 .cse9 .cse4) .cse5 (and .cse2 .cse9 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-06 22:50:14,830 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2021-12-06 22:50:14,830 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-12-06 22:50:14,830 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 329 355) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0))) (or .cse2 .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-12-06 22:50:14,830 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse3 (= 1 ~systemActive~0))) (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (and (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|) (<= |timeShift_getWaterLevel_#res#1| 2) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|))) (.cse13 (not (= 0 ~systemActive~0))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (= ~pumpRunning~0 0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse3)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse4 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6 (and .cse7 .cse4 .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or .cse8 .cse0 .cse9 .cse6 .cse10) (let ((.cse11 (= ~waterLevel~0 1))) (or (and .cse2 .cse3 .cse11 .cse5) .cse0 .cse1 (and .cse7 .cse11 .cse5) .cse6 .cse10)) (or .cse8 (and .cse2 .cse12) .cse6 .cse13) (or .cse8 .cse9 .cse6 .cse13 .cse10) (or (and .cse2 .cse3 .cse12) .cse8 .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse12) .cse6)))) [2021-12-06 22:50:14,830 INFO L858 garLoopResultBuilder]: For program point L336-2(lines 332 354) no Hoare annotation was computed. [2021-12-06 22:50:14,830 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 329 355) no Hoare annotation was computed. [2021-12-06 22:50:14,831 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 144) no Hoare annotation was computed. [2021-12-06 22:50:14,831 INFO L858 garLoopResultBuilder]: For program point L572(lines 572 578) no Hoare annotation was computed. [2021-12-06 22:50:14,831 INFO L858 garLoopResultBuilder]: For program point L572-1(lines 572 578) no Hoare annotation was computed. [2021-12-06 22:50:14,831 INFO L858 garLoopResultBuilder]: For program point L184(lines 184 190) no Hoare annotation was computed. [2021-12-06 22:50:14,831 INFO L858 garLoopResultBuilder]: For program point L184-1(lines 184 190) no Hoare annotation was computed. [2021-12-06 22:50:14,831 INFO L854 garLoopResultBuilder]: At program point L209(lines 164 211) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-06 22:50:14,831 INFO L854 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-06 22:50:14,831 INFO L854 garLoopResultBuilder]: At program point L135(lines 130 138) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 22:50:14,831 INFO L861 garLoopResultBuilder]: At program point L292(lines 284 294) the Hoare annotation is: true [2021-12-06 22:50:14,831 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 22:50:14,832 INFO L854 garLoopResultBuilder]: At program point L127(lines 123 129) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 22:50:14,832 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 22:50:14,832 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 22:50:14,832 INFO L858 garLoopResultBuilder]: For program point L305(lines 305 312) no Hoare annotation was computed. [2021-12-06 22:50:14,832 INFO L858 garLoopResultBuilder]: For program point L305-2(lines 305 312) no Hoare annotation was computed. [2021-12-06 22:50:14,832 INFO L858 garLoopResultBuilder]: For program point L165(lines 164 211) no Hoare annotation was computed. [2021-12-06 22:50:14,832 INFO L858 garLoopResultBuilder]: For program point L194(lines 194 207) no Hoare annotation was computed. [2021-12-06 22:50:14,832 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 22:50:14,832 INFO L854 garLoopResultBuilder]: At program point L574(line 574) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= ~waterLevel~0 2))) (or (and (= 1 ~systemActive~0) .cse0 .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not (= 0 ~systemActive~0))))) [2021-12-06 22:50:14,832 INFO L854 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-06 22:50:14,833 INFO L861 garLoopResultBuilder]: At program point L314(lines 295 317) the Hoare annotation is: true [2021-12-06 22:50:14,833 INFO L854 garLoopResultBuilder]: At program point L281(lines 277 283) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 22:50:14,833 INFO L854 garLoopResultBuilder]: At program point L120(lines 116 122) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 22:50:14,833 INFO L861 garLoopResultBuilder]: At program point L215(lines 154 219) the Hoare annotation is: true [2021-12-06 22:50:14,833 INFO L858 garLoopResultBuilder]: For program point L174(lines 174 180) no Hoare annotation was computed. [2021-12-06 22:50:14,833 INFO L858 garLoopResultBuilder]: For program point L174-1(lines 174 180) no Hoare annotation was computed. [2021-12-06 22:50:14,833 INFO L858 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2021-12-06 22:50:14,833 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 22:50:14,833 INFO L854 garLoopResultBuilder]: At program point L212(lines 163 213) the Hoare annotation is: false [2021-12-06 22:50:14,833 INFO L858 garLoopResultBuilder]: For program point L200(lines 200 206) no Hoare annotation was computed. [2021-12-06 22:50:14,834 INFO L854 garLoopResultBuilder]: At program point L200-2(lines 194 207) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-06 22:50:14,834 INFO L854 garLoopResultBuilder]: At program point L580(lines 568 582) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) [2021-12-06 22:50:14,834 INFO L854 garLoopResultBuilder]: At program point L545(lines 530 548) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and .cse2 (<= 2 ~waterLevel~0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 22:50:14,834 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 364 388) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-06 22:50:14,834 INFO L854 garLoopResultBuilder]: At program point L446(lines 441 448) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2021-12-06 22:50:14,834 INFO L858 garLoopResultBuilder]: For program point L667(lines 667 673) no Hoare annotation was computed. [2021-12-06 22:50:14,834 INFO L858 garLoopResultBuilder]: For program point L539(lines 539 543) no Hoare annotation was computed. [2021-12-06 22:50:14,834 INFO L854 garLoopResultBuilder]: At program point L378(line 378) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 22:50:14,834 INFO L858 garLoopResultBuilder]: For program point L539-2(lines 539 543) no Hoare annotation was computed. [2021-12-06 22:50:14,835 INFO L858 garLoopResultBuilder]: For program point L372(lines 372 380) no Hoare annotation was computed. [2021-12-06 22:50:14,835 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 385) no Hoare annotation was computed. [2021-12-06 22:50:14,835 INFO L854 garLoopResultBuilder]: At program point L672(lines 663 676) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and .cse2 (<= 2 ~waterLevel~0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2))))) [2021-12-06 22:50:14,835 INFO L854 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 22:50:14,835 INFO L858 garLoopResultBuilder]: For program point L383-1(lines 364 388) no Hoare annotation was computed. [2021-12-06 22:50:14,835 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 364 388) no Hoare annotation was computed. [2021-12-06 22:50:14,835 INFO L858 garLoopResultBuilder]: For program point L456(lines 456 462) no Hoare annotation was computed. [2021-12-06 22:50:14,835 INFO L854 garLoopResultBuilder]: At program point L454(line 454) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))))) [2021-12-06 22:50:14,835 INFO L854 garLoopResultBuilder]: At program point L456-2(lines 449 465) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2)))) (and (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) .cse0) .cse1 .cse2 (and (= ~pumpRunning~0 0) .cse0))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 22:50:14,836 INFO L858 garLoopResultBuilder]: For program point L454-1(line 454) no Hoare annotation was computed. [2021-12-06 22:50:14,836 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 598 609) no Hoare annotation was computed. [2021-12-06 22:50:14,836 INFO L858 garLoopResultBuilder]: For program point L602-1(lines 598 609) no Hoare annotation was computed. [2021-12-06 22:50:14,836 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 598 609) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse3 (not (= 0 ~systemActive~0))) (or .cse4 .cse0 .cse2 .cse3))) [2021-12-06 22:50:14,836 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 474 484) the Hoare annotation is: true [2021-12-06 22:50:14,836 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 474 484) no Hoare annotation was computed. [2021-12-06 22:50:14,836 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 474 484) no Hoare annotation was computed. [2021-12-06 22:50:14,836 INFO L861 garLoopResultBuilder]: At program point L627(lines 622 630) the Hoare annotation is: true [2021-12-06 22:50:14,839 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:14,840 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 22:50:14,875 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 10:50:14 BoogieIcfgContainer [2021-12-06 22:50:14,875 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 22:50:14,876 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 22:50:14,876 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 22:50:14,876 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 22:50:14,877 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:50:06" (3/4) ... [2021-12-06 22:50:14,879 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 22:50:14,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-06 22:50:14,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 22:50:14,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 22:50:14,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 22:50:14,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 22:50:14,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 22:50:14,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 22:50:14,886 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-06 22:50:14,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-06 22:50:14,887 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-06 22:50:14,895 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-06 22:50:14,896 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 22:50:14,897 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 22:50:14,897 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 22:50:14,898 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 22:50:14,899 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 22:50:14,899 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 22:50:14,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 22:50:14,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-06 22:50:14,925 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2021-12-06 22:50:14,925 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 22:50:14,925 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-06 22:50:14,926 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 22:50:14,927 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-06 22:50:14,927 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2021-12-06 22:50:14,927 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) [2021-12-06 22:50:14,927 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-06 22:50:14,927 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-06 22:50:14,928 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2021-12-06 22:50:14,961 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 22:50:14,961 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 22:50:14,962 INFO L158 Benchmark]: Toolchain (without parser) took 9812.37ms. Allocated memory was 155.2MB in the beginning and 264.2MB in the end (delta: 109.1MB). Free memory was 113.9MB in the beginning and 177.2MB in the end (delta: -63.3MB). Peak memory consumption was 44.3MB. Max. memory is 16.1GB. [2021-12-06 22:50:14,962 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 155.2MB. Free memory is still 131.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:50:14,963 INFO L158 Benchmark]: CACSL2BoogieTranslator took 369.93ms. Allocated memory is still 155.2MB. Free memory was 113.7MB in the beginning and 118.7MB in the end (delta: -4.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-06 22:50:14,963 INFO L158 Benchmark]: Boogie Procedure Inliner took 40.17ms. Allocated memory is still 155.2MB. Free memory was 118.7MB in the beginning and 115.8MB in the end (delta: 2.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-06 22:50:14,963 INFO L158 Benchmark]: Boogie Preprocessor took 22.73ms. Allocated memory is still 155.2MB. Free memory was 115.8MB in the beginning and 113.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 22:50:14,964 INFO L158 Benchmark]: RCFGBuilder took 419.57ms. Allocated memory is still 155.2MB. Free memory was 113.7MB in the beginning and 96.2MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-06 22:50:14,964 INFO L158 Benchmark]: TraceAbstraction took 8869.53ms. Allocated memory was 155.2MB in the beginning and 264.2MB in the end (delta: 109.1MB). Free memory was 95.6MB in the beginning and 184.5MB in the end (delta: -88.9MB). Peak memory consumption was 130.6MB. Max. memory is 16.1GB. [2021-12-06 22:50:14,964 INFO L158 Benchmark]: Witness Printer took 85.57ms. Allocated memory is still 264.2MB. Free memory was 184.5MB in the beginning and 177.2MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-06 22:50:14,966 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 155.2MB. Free memory is still 131.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 369.93ms. Allocated memory is still 155.2MB. Free memory was 113.7MB in the beginning and 118.7MB in the end (delta: -4.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 40.17ms. Allocated memory is still 155.2MB. Free memory was 118.7MB in the beginning and 115.8MB in the end (delta: 2.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 22.73ms. Allocated memory is still 155.2MB. Free memory was 115.8MB in the beginning and 113.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 419.57ms. Allocated memory is still 155.2MB. Free memory was 113.7MB in the beginning and 96.2MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 8869.53ms. Allocated memory was 155.2MB in the beginning and 264.2MB in the end (delta: 109.1MB). Free memory was 95.6MB in the beginning and 184.5MB in the end (delta: -88.9MB). Peak memory consumption was 130.6MB. Max. memory is 16.1GB. * Witness Printer took 85.57ms. Allocated memory is still 264.2MB. Free memory was 184.5MB in the beginning and 177.2MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 144]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 117 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.8s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2351 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2299 mSDsluCounter, 4606 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3052 mSDsCounter, 850 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2358 IncrementalHoareTripleChecker+Invalid, 3208 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 850 mSolverCounterUnsat, 1554 mSDtfsCounter, 2358 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 488 GetRequests, 377 SyntacticMatches, 2 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 640 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1082occurred in iteration=8, InterpolantAutomatonStates: 103, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 273 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 54 LocationsWithAnnotation, 2243 PreInvPairs, 2474 NumberOfFragments, 2353 HoareAnnotationTreeSize, 2243 FomulaSimplifications, 1974 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 54 FomulaSimplificationsInter, 11627 FormulaSimplificationTreeSizeReductionInter, 2.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 770 NumberOfCodeBlocks, 770 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 879 ConstructedInterpolants, 0 QuantifiedInterpolants, 1624 SizeOfPredicates, 3 NumberOfNonLiveVariables, 535 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 133/174 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 622]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 232]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 222]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 284]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2021-12-06 22:50:15,021 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1fac25c0-ecc2-4621-9ce7-7745f5a65de3/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE