./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 19:29:00,523 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 19:29:00,525 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 19:29:00,547 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 19:29:00,548 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 19:29:00,549 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 19:29:00,550 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 19:29:00,552 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 19:29:00,553 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 19:29:00,554 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 19:29:00,555 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 19:29:00,556 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 19:29:00,557 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 19:29:00,557 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 19:29:00,559 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 19:29:00,560 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 19:29:00,561 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 19:29:00,561 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 19:29:00,563 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 19:29:00,565 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 19:29:00,567 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 19:29:00,568 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 19:29:00,569 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 19:29:00,570 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 19:29:00,572 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 19:29:00,573 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 19:29:00,573 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 19:29:00,574 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 19:29:00,574 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 19:29:00,575 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 19:29:00,575 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 19:29:00,576 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 19:29:00,577 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 19:29:00,577 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 19:29:00,578 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 19:29:00,578 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 19:29:00,579 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 19:29:00,579 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 19:29:00,579 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 19:29:00,580 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 19:29:00,580 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 19:29:00,581 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 19:29:00,598 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 19:29:00,598 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 19:29:00,599 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 19:29:00,599 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 19:29:00,599 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 19:29:00,599 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 19:29:00,600 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 19:29:00,600 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 19:29:00,600 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 19:29:00,600 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 19:29:00,600 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 19:29:00,601 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 19:29:00,601 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 19:29:00,601 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 19:29:00,601 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 19:29:00,601 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 19:29:00,601 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 19:29:00,601 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 19:29:00,601 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 19:29:00,601 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 19:29:00,602 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 19:29:00,602 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 19:29:00,602 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 19:29:00,602 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 19:29:00,602 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 19:29:00,602 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 19:29:00,602 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 19:29:00,603 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 19:29:00,603 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 19:29:00,603 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 19:29:00,603 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 19:29:00,603 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 19:29:00,603 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 19:29:00,603 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 19:29:00,603 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b [2021-12-06 19:29:00,797 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 19:29:00,812 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 19:29:00,814 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 19:29:00,814 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 19:29:00,815 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 19:29:00,816 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2021-12-06 19:29:00,862 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/data/2c1fef7a9/c778b38808aa48178cb2499604f17af8/FLAGac2d4aa81 [2021-12-06 19:29:01,271 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 19:29:01,272 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2021-12-06 19:29:01,283 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/data/2c1fef7a9/c778b38808aa48178cb2499604f17af8/FLAGac2d4aa81 [2021-12-06 19:29:01,295 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/data/2c1fef7a9/c778b38808aa48178cb2499604f17af8 [2021-12-06 19:29:01,297 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 19:29:01,298 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 19:29:01,299 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 19:29:01,299 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 19:29:01,302 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 19:29:01,302 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,303 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@347dae6d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01, skipping insertion in model container [2021-12-06 19:29:01,303 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,308 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 19:29:01,346 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 19:29:01,508 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2021-12-06 19:29:01,542 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 19:29:01,549 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 19:29:01,579 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2021-12-06 19:29:01,603 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 19:29:01,617 INFO L208 MainTranslator]: Completed translation [2021-12-06 19:29:01,617 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01 WrapperNode [2021-12-06 19:29:01,617 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 19:29:01,618 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 19:29:01,618 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 19:29:01,618 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 19:29:01,624 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,635 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,656 INFO L137 Inliner]: procedures = 61, calls = 166, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 302 [2021-12-06 19:29:01,656 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 19:29:01,657 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 19:29:01,657 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 19:29:01,657 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 19:29:01,664 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,664 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,666 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,666 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,671 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,675 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,677 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,679 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 19:29:01,680 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 19:29:01,680 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 19:29:01,680 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 19:29:01,681 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (1/1) ... [2021-12-06 19:29:01,688 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 19:29:01,700 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 19:29:01,711 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 19:29:01,713 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 19:29:01,743 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 19:29:01,743 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 19:29:01,743 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 19:29:01,744 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 19:29:01,744 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 19:29:01,744 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 19:29:01,744 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 19:29:01,744 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 19:29:01,744 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 19:29:01,744 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 19:29:01,744 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 19:29:01,745 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 19:29:01,745 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 19:29:01,745 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-06 19:29:01,745 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-06 19:29:01,745 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-06 19:29:01,745 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-06 19:29:01,745 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-06 19:29:01,746 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-06 19:29:01,746 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 19:29:01,746 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 19:29:01,746 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 19:29:01,746 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 19:29:01,746 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 19:29:01,809 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 19:29:01,811 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 19:29:02,056 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 19:29:02,061 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 19:29:02,062 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 19:29:02,063 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 07:29:02 BoogieIcfgContainer [2021-12-06 19:29:02,063 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 19:29:02,065 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 19:29:02,065 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 19:29:02,068 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 19:29:02,068 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 07:29:01" (1/3) ... [2021-12-06 19:29:02,069 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@501d1339 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 07:29:02, skipping insertion in model container [2021-12-06 19:29:02,069 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 07:29:01" (2/3) ... [2021-12-06 19:29:02,070 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@501d1339 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 07:29:02, skipping insertion in model container [2021-12-06 19:29:02,070 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 07:29:02" (3/3) ... [2021-12-06 19:29:02,071 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product64.cil.c [2021-12-06 19:29:02,076 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 19:29:02,077 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 19:29:02,114 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 19:29:02,120 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 19:29:02,120 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 19:29:02,138 INFO L276 IsEmpty]: Start isEmpty. Operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2021-12-06 19:29:02,148 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-06 19:29:02,148 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:02,149 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:02,149 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:02,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:02,155 INFO L85 PathProgramCache]: Analyzing trace with hash 1423497268, now seen corresponding path program 1 times [2021-12-06 19:29:02,164 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:02,164 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1260251389] [2021-12-06 19:29:02,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:02,166 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:02,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 19:29:02,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 19:29:02,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,363 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 19:29:02,363 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:02,363 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1260251389] [2021-12-06 19:29:02,364 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1260251389] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 19:29:02,364 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 19:29:02,364 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 19:29:02,365 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1850896497] [2021-12-06 19:29:02,366 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 19:29:02,369 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 19:29:02,369 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:02,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 19:29:02,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 19:29:02,391 INFO L87 Difference]: Start difference. First operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 19:29:02,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:02,418 INFO L93 Difference]: Finished difference Result 227 states and 306 transitions. [2021-12-06 19:29:02,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 19:29:02,420 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-06 19:29:02,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:02,428 INFO L225 Difference]: With dead ends: 227 [2021-12-06 19:29:02,428 INFO L226 Difference]: Without dead ends: 109 [2021-12-06 19:29:02,432 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 19:29:02,434 INFO L933 BasicCegarLoop]: 150 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:02,435 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 19:29:02,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2021-12-06 19:29:02,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 109. [2021-12-06 19:29:02,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 80 states have (on average 1.3) internal successors, (104), 90 states have internal predecessors, (104), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-06 19:29:02,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 141 transitions. [2021-12-06 19:29:02,477 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 141 transitions. Word has length 32 [2021-12-06 19:29:02,477 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:02,477 INFO L470 AbstractCegarLoop]: Abstraction has 109 states and 141 transitions. [2021-12-06 19:29:02,477 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 19:29:02,478 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 141 transitions. [2021-12-06 19:29:02,480 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-06 19:29:02,480 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:02,480 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:02,480 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 19:29:02,481 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:02,481 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:02,481 INFO L85 PathProgramCache]: Analyzing trace with hash -1062885571, now seen corresponding path program 1 times [2021-12-06 19:29:02,482 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:02,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [709590584] [2021-12-06 19:29:02,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:02,482 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:02,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 19:29:02,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 19:29:02,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,538 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 19:29:02,538 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:02,538 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [709590584] [2021-12-06 19:29:02,539 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [709590584] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 19:29:02,539 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 19:29:02,539 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 19:29:02,539 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [741193697] [2021-12-06 19:29:02,539 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 19:29:02,540 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 19:29:02,540 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:02,540 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 19:29:02,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 19:29:02,541 INFO L87 Difference]: Start difference. First operand 109 states and 141 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 19:29:02,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:02,556 INFO L93 Difference]: Finished difference Result 178 states and 230 transitions. [2021-12-06 19:29:02,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 19:29:02,557 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-06 19:29:02,557 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:02,558 INFO L225 Difference]: With dead ends: 178 [2021-12-06 19:29:02,558 INFO L226 Difference]: Without dead ends: 100 [2021-12-06 19:29:02,559 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 19:29:02,560 INFO L933 BasicCegarLoop]: 128 mSDtfsCounter, 17 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:02,561 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 234 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 19:29:02,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2021-12-06 19:29:02,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2021-12-06 19:29:02,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-06 19:29:02,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 129 transitions. [2021-12-06 19:29:02,572 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 129 transitions. Word has length 33 [2021-12-06 19:29:02,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:02,572 INFO L470 AbstractCegarLoop]: Abstraction has 100 states and 129 transitions. [2021-12-06 19:29:02,572 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 19:29:02,573 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 129 transitions. [2021-12-06 19:29:02,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-06 19:29:02,574 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:02,574 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:02,574 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 19:29:02,574 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:02,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:02,575 INFO L85 PathProgramCache]: Analyzing trace with hash 214115468, now seen corresponding path program 1 times [2021-12-06 19:29:02,575 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:02,575 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [140510267] [2021-12-06 19:29:02,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:02,576 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:02,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 19:29:02,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 19:29:02,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,638 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 19:29:02,638 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:02,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [140510267] [2021-12-06 19:29:02,639 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [140510267] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 19:29:02,639 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 19:29:02,639 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 19:29:02,639 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1850164219] [2021-12-06 19:29:02,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 19:29:02,639 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 19:29:02,640 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:02,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 19:29:02,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 19:29:02,640 INFO L87 Difference]: Start difference. First operand 100 states and 129 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 19:29:02,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:02,705 INFO L93 Difference]: Finished difference Result 239 states and 312 transitions. [2021-12-06 19:29:02,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 19:29:02,705 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-06 19:29:02,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:02,707 INFO L225 Difference]: With dead ends: 239 [2021-12-06 19:29:02,707 INFO L226 Difference]: Without dead ends: 147 [2021-12-06 19:29:02,708 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 19:29:02,709 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 190 mSDsluCounter, 289 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:02,710 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 431 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 19:29:02,711 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2021-12-06 19:29:02,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 144. [2021-12-06 19:29:02,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 107 states have (on average 1.3271028037383177) internal successors, (142), 120 states have internal predecessors, (142), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (23), 16 states have call predecessors, (23), 22 states have call successors, (23) [2021-12-06 19:29:02,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 187 transitions. [2021-12-06 19:29:02,726 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 187 transitions. Word has length 38 [2021-12-06 19:29:02,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:02,726 INFO L470 AbstractCegarLoop]: Abstraction has 144 states and 187 transitions. [2021-12-06 19:29:02,726 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 19:29:02,726 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 187 transitions. [2021-12-06 19:29:02,728 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-06 19:29:02,728 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:02,728 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:02,728 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 19:29:02,729 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:02,729 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:02,729 INFO L85 PathProgramCache]: Analyzing trace with hash 384205224, now seen corresponding path program 1 times [2021-12-06 19:29:02,729 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:02,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1810282755] [2021-12-06 19:29:02,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:02,730 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:02,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-06 19:29:02,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-06 19:29:02,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,792 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-06 19:29:02,793 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:02,793 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1810282755] [2021-12-06 19:29:02,793 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1810282755] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 19:29:02,793 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 19:29:02,793 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 19:29:02,793 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1329319453] [2021-12-06 19:29:02,793 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 19:29:02,794 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 19:29:02,794 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:02,794 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 19:29:02,794 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 19:29:02,794 INFO L87 Difference]: Start difference. First operand 144 states and 187 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 19:29:02,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:02,901 INFO L93 Difference]: Finished difference Result 337 states and 449 transitions. [2021-12-06 19:29:02,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 19:29:02,901 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-06 19:29:02,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:02,904 INFO L225 Difference]: With dead ends: 337 [2021-12-06 19:29:02,904 INFO L226 Difference]: Without dead ends: 201 [2021-12-06 19:29:02,910 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-06 19:29:02,911 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 66 mSDsluCounter, 446 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 582 SdHoareTripleChecker+Invalid, 93 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:02,912 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 582 Invalid, 93 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 19:29:02,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2021-12-06 19:29:02,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 191. [2021-12-06 19:29:02,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 191 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 155 states have internal predecessors, (180), 26 states have call successors, (26), 21 states have call predecessors, (26), 21 states have return successors, (34), 24 states have call predecessors, (34), 26 states have call successors, (34) [2021-12-06 19:29:02,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 240 transitions. [2021-12-06 19:29:02,930 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 240 transitions. Word has length 41 [2021-12-06 19:29:02,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:02,930 INFO L470 AbstractCegarLoop]: Abstraction has 191 states and 240 transitions. [2021-12-06 19:29:02,931 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 19:29:02,931 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 240 transitions. [2021-12-06 19:29:02,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-12-06 19:29:02,933 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:02,933 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:02,933 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 19:29:02,933 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:02,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:02,934 INFO L85 PathProgramCache]: Analyzing trace with hash -602736799, now seen corresponding path program 1 times [2021-12-06 19:29:02,934 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:02,934 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [397073985] [2021-12-06 19:29:02,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:02,934 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:02,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-06 19:29:02,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-06 19:29:02,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 19:29:02,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 19:29:02,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-06 19:29:02,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:02,994 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 19:29:02,995 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:02,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [397073985] [2021-12-06 19:29:02,995 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [397073985] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 19:29:02,995 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 19:29:02,995 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 19:29:02,995 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1254974926] [2021-12-06 19:29:02,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 19:29:02,996 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 19:29:02,996 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:02,996 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 19:29:02,996 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 19:29:02,996 INFO L87 Difference]: Start difference. First operand 191 states and 240 transitions. Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-06 19:29:03,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:03,082 INFO L93 Difference]: Finished difference Result 405 states and 508 transitions. [2021-12-06 19:29:03,083 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 19:29:03,083 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 68 [2021-12-06 19:29:03,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:03,085 INFO L225 Difference]: With dead ends: 405 [2021-12-06 19:29:03,086 INFO L226 Difference]: Without dead ends: 222 [2021-12-06 19:29:03,087 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 19:29:03,088 INFO L933 BasicCegarLoop]: 148 mSDtfsCounter, 107 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:03,089 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [116 Valid, 304 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 19:29:03,090 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2021-12-06 19:29:03,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 218. [2021-12-06 19:29:03,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 163 states have (on average 1.2453987730061349) internal successors, (203), 175 states have internal predecessors, (203), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2021-12-06 19:29:03,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 270 transitions. [2021-12-06 19:29:03,112 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 270 transitions. Word has length 68 [2021-12-06 19:29:03,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:03,113 INFO L470 AbstractCegarLoop]: Abstraction has 218 states and 270 transitions. [2021-12-06 19:29:03,113 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-06 19:29:03,113 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 270 transitions. [2021-12-06 19:29:03,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 19:29:03,116 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:03,116 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:03,116 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 19:29:03,117 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:03,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:03,117 INFO L85 PathProgramCache]: Analyzing trace with hash -578050563, now seen corresponding path program 1 times [2021-12-06 19:29:03,117 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:03,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1191148809] [2021-12-06 19:29:03,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:03,118 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:03,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 19:29:03,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 19:29:03,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 19:29:03,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 19:29:03,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 19:29:03,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,208 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 19:29:03,208 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:03,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1191148809] [2021-12-06 19:29:03,208 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1191148809] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 19:29:03,209 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 19:29:03,209 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 19:29:03,209 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [438392192] [2021-12-06 19:29:03,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 19:29:03,210 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 19:29:03,210 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:03,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 19:29:03,210 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 19:29:03,211 INFO L87 Difference]: Start difference. First operand 218 states and 270 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 19:29:03,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:03,324 INFO L93 Difference]: Finished difference Result 438 states and 557 transitions. [2021-12-06 19:29:03,324 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 19:29:03,325 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2021-12-06 19:29:03,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:03,326 INFO L225 Difference]: With dead ends: 438 [2021-12-06 19:29:03,326 INFO L226 Difference]: Without dead ends: 228 [2021-12-06 19:29:03,327 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 19:29:03,328 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 82 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 464 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:03,328 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [87 Valid, 464 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 19:29:03,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2021-12-06 19:29:03,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 221. [2021-12-06 19:29:03,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 166 states have (on average 1.2409638554216869) internal successors, (206), 178 states have internal predecessors, (206), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2021-12-06 19:29:03,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 273 transitions. [2021-12-06 19:29:03,342 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 273 transitions. Word has length 65 [2021-12-06 19:29:03,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:03,343 INFO L470 AbstractCegarLoop]: Abstraction has 221 states and 273 transitions. [2021-12-06 19:29:03,343 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 19:29:03,343 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 273 transitions. [2021-12-06 19:29:03,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 19:29:03,344 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:03,344 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:03,344 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 19:29:03,344 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:03,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:03,345 INFO L85 PathProgramCache]: Analyzing trace with hash 808152831, now seen corresponding path program 1 times [2021-12-06 19:29:03,345 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:03,345 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106012481] [2021-12-06 19:29:03,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:03,345 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:03,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 19:29:03,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 19:29:03,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 19:29:03,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 19:29:03,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 19:29:03,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,410 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 19:29:03,410 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:03,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106012481] [2021-12-06 19:29:03,411 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106012481] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 19:29:03,411 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 19:29:03,411 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 19:29:03,411 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1098209358] [2021-12-06 19:29:03,411 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 19:29:03,412 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 19:29:03,412 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:03,412 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 19:29:03,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 19:29:03,413 INFO L87 Difference]: Start difference. First operand 221 states and 273 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 19:29:03,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:03,506 INFO L93 Difference]: Finished difference Result 444 states and 562 transitions. [2021-12-06 19:29:03,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 19:29:03,507 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2021-12-06 19:29:03,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:03,509 INFO L225 Difference]: With dead ends: 444 [2021-12-06 19:29:03,509 INFO L226 Difference]: Without dead ends: 231 [2021-12-06 19:29:03,510 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 19:29:03,511 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 83 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 364 SdHoareTripleChecker+Invalid, 131 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:03,512 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [89 Valid, 364 Invalid, 131 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 19:29:03,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2021-12-06 19:29:03,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 223. [2021-12-06 19:29:03,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 223 states, 168 states have (on average 1.2380952380952381) internal successors, (208), 180 states have internal predecessors, (208), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2021-12-06 19:29:03,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 275 transitions. [2021-12-06 19:29:03,529 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 275 transitions. Word has length 65 [2021-12-06 19:29:03,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:03,529 INFO L470 AbstractCegarLoop]: Abstraction has 223 states and 275 transitions. [2021-12-06 19:29:03,530 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 19:29:03,530 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 275 transitions. [2021-12-06 19:29:03,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 19:29:03,531 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:03,531 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:03,531 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 19:29:03,531 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:03,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:03,532 INFO L85 PathProgramCache]: Analyzing trace with hash 1509752705, now seen corresponding path program 1 times [2021-12-06 19:29:03,532 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:03,532 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421465994] [2021-12-06 19:29:03,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:03,532 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:03,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 19:29:03,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 19:29:03,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 19:29:03,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 19:29:03,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 19:29:03,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,610 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 19:29:03,610 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:03,610 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421465994] [2021-12-06 19:29:03,611 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1421465994] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 19:29:03,611 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 19:29:03,611 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 19:29:03,611 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1914902988] [2021-12-06 19:29:03,611 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 19:29:03,612 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 19:29:03,612 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:03,612 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 19:29:03,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 19:29:03,613 INFO L87 Difference]: Start difference. First operand 223 states and 275 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-06 19:29:03,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:03,784 INFO L93 Difference]: Finished difference Result 661 states and 844 transitions. [2021-12-06 19:29:03,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 19:29:03,784 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 65 [2021-12-06 19:29:03,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:03,788 INFO L225 Difference]: With dead ends: 661 [2021-12-06 19:29:03,788 INFO L226 Difference]: Without dead ends: 446 [2021-12-06 19:29:03,789 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-06 19:29:03,790 INFO L933 BasicCegarLoop]: 173 mSDtfsCounter, 257 mSDsluCounter, 221 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 265 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:03,791 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [265 Valid, 394 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 19:29:03,792 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 446 states. [2021-12-06 19:29:03,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 446 to 444. [2021-12-06 19:29:03,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 444 states, 334 states have (on average 1.2125748502994012) internal successors, (405), 354 states have internal predecessors, (405), 59 states have call successors, (59), 48 states have call predecessors, (59), 50 states have return successors, (86), 59 states have call predecessors, (86), 59 states have call successors, (86) [2021-12-06 19:29:03,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 444 states to 444 states and 550 transitions. [2021-12-06 19:29:03,826 INFO L78 Accepts]: Start accepts. Automaton has 444 states and 550 transitions. Word has length 65 [2021-12-06 19:29:03,826 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:03,826 INFO L470 AbstractCegarLoop]: Abstraction has 444 states and 550 transitions. [2021-12-06 19:29:03,826 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-06 19:29:03,826 INFO L276 IsEmpty]: Start isEmpty. Operand 444 states and 550 transitions. [2021-12-06 19:29:03,828 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-06 19:29:03,828 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:03,828 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:03,828 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 19:29:03,828 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:03,829 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:03,829 INFO L85 PathProgramCache]: Analyzing trace with hash 920584039, now seen corresponding path program 1 times [2021-12-06 19:29:03,829 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:03,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [898546490] [2021-12-06 19:29:03,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:03,830 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:03,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 19:29:03,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 19:29:03,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-06 19:29:03,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 19:29:03,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 19:29:03,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-06 19:29:03,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:03,949 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 19:29:03,949 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:03,949 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [898546490] [2021-12-06 19:29:03,950 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [898546490] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 19:29:03,950 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 19:29:03,950 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-06 19:29:03,950 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2028940354] [2021-12-06 19:29:03,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 19:29:03,950 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-06 19:29:03,951 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:03,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-06 19:29:03,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-06 19:29:03,951 INFO L87 Difference]: Start difference. First operand 444 states and 550 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-06 19:29:04,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:04,557 INFO L93 Difference]: Finished difference Result 1162 states and 1499 transitions. [2021-12-06 19:29:04,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-06 19:29:04,557 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) Word has length 69 [2021-12-06 19:29:04,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:04,564 INFO L225 Difference]: With dead ends: 1162 [2021-12-06 19:29:04,564 INFO L226 Difference]: Without dead ends: 819 [2021-12-06 19:29:04,567 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-12-06 19:29:04,567 INFO L933 BasicCegarLoop]: 172 mSDtfsCounter, 648 mSDsluCounter, 524 mSDsCounter, 0 mSdLazyCounter, 771 mSolverCounterSat, 261 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 656 SdHoareTripleChecker+Valid, 696 SdHoareTripleChecker+Invalid, 1032 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 261 IncrementalHoareTripleChecker+Valid, 771 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:04,568 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [656 Valid, 696 Invalid, 1032 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [261 Valid, 771 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 19:29:04,569 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 819 states. [2021-12-06 19:29:04,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 819 to 658. [2021-12-06 19:29:04,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 658 states, 494 states have (on average 1.2044534412955465) internal successors, (595), 527 states have internal predecessors, (595), 87 states have call successors, (87), 66 states have call predecessors, (87), 76 states have return successors, (130), 86 states have call predecessors, (130), 87 states have call successors, (130) [2021-12-06 19:29:04,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 658 states to 658 states and 812 transitions. [2021-12-06 19:29:04,605 INFO L78 Accepts]: Start accepts. Automaton has 658 states and 812 transitions. Word has length 69 [2021-12-06 19:29:04,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:04,605 INFO L470 AbstractCegarLoop]: Abstraction has 658 states and 812 transitions. [2021-12-06 19:29:04,606 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-06 19:29:04,606 INFO L276 IsEmpty]: Start isEmpty. Operand 658 states and 812 transitions. [2021-12-06 19:29:04,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-12-06 19:29:04,607 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 19:29:04,608 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:04,608 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 19:29:04,608 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 19:29:04,608 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 19:29:04,608 INFO L85 PathProgramCache]: Analyzing trace with hash 1227003405, now seen corresponding path program 1 times [2021-12-06 19:29:04,608 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 19:29:04,608 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [51448607] [2021-12-06 19:29:04,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:04,609 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 19:29:04,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 19:29:04,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 19:29:04,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 19:29:04,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-06 19:29:04,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 19:29:04,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 19:29:04,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-06 19:29:04,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-12-06 19:29:04,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-06 19:29:04,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 19:29:04,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 19:29:04,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-06 19:29:04,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,729 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-06 19:29:04,729 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 19:29:04,729 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [51448607] [2021-12-06 19:29:04,729 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [51448607] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 19:29:04,729 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [944908716] [2021-12-06 19:29:04,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 19:29:04,730 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 19:29:04,730 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 19:29:04,731 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 19:29:04,731 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 19:29:04,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 19:29:04,808 INFO L263 TraceCheckSpWp]: Trace formula consists of 541 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 19:29:04,817 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 19:29:05,041 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 31 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 19:29:05,042 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 19:29:05,246 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-06 19:29:05,246 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [944908716] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 19:29:05,246 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 19:29:05,246 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-12-06 19:29:05,246 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1623137282] [2021-12-06 19:29:05,247 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 19:29:05,247 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-12-06 19:29:05,247 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 19:29:05,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-12-06 19:29:05,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-12-06 19:29:05,248 INFO L87 Difference]: Start difference. First operand 658 states and 812 transitions. Second operand has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2021-12-06 19:29:05,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 19:29:05,981 INFO L93 Difference]: Finished difference Result 1413 states and 1792 transitions. [2021-12-06 19:29:05,981 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-12-06 19:29:05,981 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) Word has length 123 [2021-12-06 19:29:05,982 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 19:29:05,983 INFO L225 Difference]: With dead ends: 1413 [2021-12-06 19:29:05,983 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 19:29:05,987 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 320 GetRequests, 279 SyntacticMatches, 1 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 391 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=301, Invalid=1421, Unknown=0, NotChecked=0, Total=1722 [2021-12-06 19:29:05,988 INFO L933 BasicCegarLoop]: 249 mSDtfsCounter, 463 mSDsluCounter, 1355 mSDsCounter, 0 mSdLazyCounter, 1392 mSolverCounterSat, 197 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 464 SdHoareTripleChecker+Valid, 1604 SdHoareTripleChecker+Invalid, 1589 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 197 IncrementalHoareTripleChecker+Valid, 1392 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-06 19:29:05,988 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [464 Valid, 1604 Invalid, 1589 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [197 Valid, 1392 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-06 19:29:05,989 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 19:29:05,989 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 19:29:05,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 19:29:05,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 19:29:05,990 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2021-12-06 19:29:05,990 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 19:29:05,990 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 19:29:05,990 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2021-12-06 19:29:05,990 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 19:29:05,990 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 19:29:05,993 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 19:29:06,027 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 19:29:06,194 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 19:29:06,195 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 19:29:09,016 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 325 332) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 19:29:09,016 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 325 332) no Hoare annotation was computed. [2021-12-06 19:29:09,016 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 325 332) no Hoare annotation was computed. [2021-12-06 19:29:09,016 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 215 221) no Hoare annotation was computed. [2021-12-06 19:29:09,016 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 215 221) the Hoare annotation is: true [2021-12-06 19:29:09,016 INFO L858 garLoopResultBuilder]: For program point L417(lines 417 421) no Hoare annotation was computed. [2021-12-06 19:29:09,017 INFO L858 garLoopResultBuilder]: For program point L417-2(lines 417 421) no Hoare annotation was computed. [2021-12-06 19:29:09,017 INFO L854 garLoopResultBuilder]: At program point L263(line 263) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 19:29:09,017 INFO L854 garLoopResultBuilder]: At program point L259(line 259) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 19:29:09,017 INFO L858 garLoopResultBuilder]: For program point L257(lines 257 265) no Hoare annotation was computed. [2021-12-06 19:29:09,017 INFO L858 garLoopResultBuilder]: For program point L253(lines 253 270) no Hoare annotation was computed. [2021-12-06 19:29:09,017 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 249 273) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-06 19:29:09,017 INFO L854 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-06 19:29:09,017 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 249 273) no Hoare annotation was computed. [2021-12-06 19:29:09,017 INFO L858 garLoopResultBuilder]: For program point L268-1(lines 249 273) no Hoare annotation was computed. [2021-12-06 19:29:09,017 INFO L854 garLoopResultBuilder]: At program point L423(lines 408 426) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 19:29:09,017 INFO L854 garLoopResultBuilder]: At program point L549(lines 544 552) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 19:29:09,018 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 344 352) no Hoare annotation was computed. [2021-12-06 19:29:09,018 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 344 352) the Hoare annotation is: true [2021-12-06 19:29:09,018 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 344 352) no Hoare annotation was computed. [2021-12-06 19:29:09,018 INFO L858 garLoopResultBuilder]: For program point L481-1(lines 477 488) no Hoare annotation was computed. [2021-12-06 19:29:09,018 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 477 488) the Hoare annotation is: true [2021-12-06 19:29:09,018 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 477 488) no Hoare annotation was computed. [2021-12-06 19:29:09,018 INFO L858 garLoopResultBuilder]: For program point L576(line 576) no Hoare annotation was computed. [2021-12-06 19:29:09,018 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 555 584) no Hoare annotation was computed. [2021-12-06 19:29:09,018 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 555 584) the Hoare annotation is: true [2021-12-06 19:29:09,018 INFO L858 garLoopResultBuilder]: For program point L569(lines 569 573) no Hoare annotation was computed. [2021-12-06 19:29:09,018 INFO L861 garLoopResultBuilder]: At program point L569-1(lines 569 573) the Hoare annotation is: true [2021-12-06 19:29:09,018 INFO L858 garLoopResultBuilder]: For program point L566(line 566) no Hoare annotation was computed. [2021-12-06 19:29:09,018 INFO L861 garLoopResultBuilder]: At program point L565-2(lines 565 579) the Hoare annotation is: true [2021-12-06 19:29:09,018 INFO L861 garLoopResultBuilder]: At program point L561(line 561) the Hoare annotation is: true [2021-12-06 19:29:09,018 INFO L858 garLoopResultBuilder]: For program point L561-1(line 561) no Hoare annotation was computed. [2021-12-06 19:29:09,019 INFO L861 garLoopResultBuilder]: At program point L580(lines 555 584) the Hoare annotation is: true [2021-12-06 19:29:09,019 INFO L858 garLoopResultBuilder]: For program point L283(lines 283 291) no Hoare annotation was computed. [2021-12-06 19:29:09,019 INFO L858 garLoopResultBuilder]: For program point L279(lines 279 296) no Hoare annotation was computed. [2021-12-06 19:29:09,019 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-12-06 19:29:09,019 INFO L854 garLoopResultBuilder]: At program point L659(lines 654 661) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 .cse2 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse2 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 19:29:09,019 INFO L858 garLoopResultBuilder]: For program point L457(lines 457 461) no Hoare annotation was computed. [2021-12-06 19:29:09,019 INFO L854 garLoopResultBuilder]: At program point L457-2(lines 453 464) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 19:29:09,019 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 188 214) no Hoare annotation was computed. [2021-12-06 19:29:09,019 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse4) .cse3)))) [2021-12-06 19:29:09,019 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2) (let ((.cse5 (<= ~waterLevel~0 2))) (or .cse3 (and .cse4 .cse5 .cse6) .cse7 .cse1 (and .cse8 .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse3 (and .cse8 .cse9 .cse6) .cse7 .cse1 .cse2 (and .cse4 .cse9 .cse6))) (or .cse0 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2021-12-06 19:29:09,019 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-12-06 19:29:09,019 INFO L858 garLoopResultBuilder]: For program point L202-1(lines 202 208) no Hoare annotation was computed. [2021-12-06 19:29:09,020 INFO L854 garLoopResultBuilder]: At program point L289(line 289) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 19:29:09,020 INFO L854 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 19:29:09,020 INFO L854 garLoopResultBuilder]: At program point L281(line 281) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 19:29:09,020 INFO L858 garLoopResultBuilder]: For program point L281-1(line 281) no Hoare annotation was computed. [2021-12-06 19:29:09,020 INFO L854 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 .cse2 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2021-12-06 19:29:09,020 INFO L854 garLoopResultBuilder]: At program point L294-1(lines 275 299) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 (not .cse2)) (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse3 .cse4) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse4) .cse1)) (let ((.cse6 (<= ~waterLevel~0 2))) (or .cse5 (and .cse3 .cse6 .cse7) .cse2 .cse1 (and .cse8 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse5 (and .cse8 .cse9 .cse7) .cse2 .cse1 (not (<= 2 |old(~waterLevel~0)|)) (and .cse3 .cse9 .cse7))))) [2021-12-06 19:29:09,020 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-06 19:29:09,020 INFO L858 garLoopResultBuilder]: For program point L195(lines 195 201) no Hoare annotation was computed. [2021-12-06 19:29:09,020 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-12-06 19:29:09,020 INFO L858 garLoopResultBuilder]: For program point L195-2(lines 191 213) no Hoare annotation was computed. [2021-12-06 19:29:09,020 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-12-06 19:29:09,020 INFO L858 garLoopResultBuilder]: For program point L658(line 658) no Hoare annotation was computed. [2021-12-06 19:29:09,020 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-12-06 19:29:09,021 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 188 214) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-06 19:29:09,021 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not .cse8))) (and (or .cse0 (and (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|) (<= |timeShift_getWaterLevel_#res#1| 2) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse1 .cse2) (let ((.cse5 (<= ~waterLevel~0 2))) (or .cse3 (and .cse4 .cse5 .cse6 .cse7) .cse8 .cse1 (and .cse9 .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse10) (and .cse4 .cse10 .cse7) .cse8 .cse1) (let ((.cse11 (= ~waterLevel~0 1))) (or (and .cse4 .cse11 .cse6 .cse7) .cse3 (and .cse9 .cse11 .cse6) .cse8 .cse1 .cse2)) (or .cse0 (and .cse4 .cse10) .cse1 .cse7)))) [2021-12-06 19:29:09,021 INFO L854 garLoopResultBuilder]: At program point L526(lines 521 529) the Hoare annotation is: (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse1 .cse2) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2 (not .cse3)) .cse4)) (let ((.cse6 (<= ~waterLevel~0 2))) (or .cse5 (and .cse1 .cse6 .cse7) .cse3 .cse4 (and .cse8 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse5 (and .cse8 .cse9 .cse7) .cse3 .cse4 .cse10 (and .cse1 .cse9 .cse7))) (or .cse0 .cse4 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse10))) [2021-12-06 19:29:09,021 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 188 214) no Hoare annotation was computed. [2021-12-06 19:29:09,021 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 658) no Hoare annotation was computed. [2021-12-06 19:29:09,021 INFO L854 garLoopResultBuilder]: At program point L168(lines 117 169) the Hoare annotation is: false [2021-12-06 19:29:09,021 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 19:29:09,021 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 19:29:09,021 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 19:29:09,021 INFO L858 garLoopResultBuilder]: For program point L156(lines 156 162) no Hoare annotation was computed. [2021-12-06 19:29:09,021 INFO L854 garLoopResultBuilder]: At program point L156-2(lines 148 163) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2021-12-06 19:29:09,022 INFO L858 garLoopResultBuilder]: For program point L119(lines 118 167) no Hoare annotation was computed. [2021-12-06 19:29:09,022 INFO L854 garLoopResultBuilder]: At program point L693(lines 688 696) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 19:29:09,022 INFO L858 garLoopResultBuilder]: For program point L148(lines 148 163) no Hoare annotation was computed. [2021-12-06 19:29:09,022 INFO L854 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2021-12-06 19:29:09,022 INFO L854 garLoopResultBuilder]: At program point L685(lines 681 687) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 19:29:09,022 INFO L854 garLoopResultBuilder]: At program point L140(line 140) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2021-12-06 19:29:09,022 INFO L854 garLoopResultBuilder]: At program point L165(lines 118 167) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2021-12-06 19:29:09,022 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 19:29:09,022 INFO L858 garLoopResultBuilder]: For program point L640(lines 640 647) no Hoare annotation was computed. [2021-12-06 19:29:09,022 INFO L858 garLoopResultBuilder]: For program point L128(lines 128 134) no Hoare annotation was computed. [2021-12-06 19:29:09,022 INFO L858 garLoopResultBuilder]: For program point L128-1(lines 128 134) no Hoare annotation was computed. [2021-12-06 19:29:09,022 INFO L858 garLoopResultBuilder]: For program point L640-2(lines 640 647) no Hoare annotation was computed. [2021-12-06 19:29:09,022 INFO L858 garLoopResultBuilder]: For program point L120(lines 120 124) no Hoare annotation was computed. [2021-12-06 19:29:09,022 INFO L861 garLoopResultBuilder]: At program point L624(lines 616 626) the Hoare annotation is: true [2021-12-06 19:29:09,023 INFO L861 garLoopResultBuilder]: At program point L649(lines 630 652) the Hoare annotation is: true [2021-12-06 19:29:09,023 INFO L854 garLoopResultBuilder]: At program point L678(lines 674 680) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 19:29:09,023 INFO L854 garLoopResultBuilder]: At program point L447(lines 442 449) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2021-12-06 19:29:09,023 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 19:29:09,023 INFO L854 garLoopResultBuilder]: At program point L439(lines 427 441) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) [2021-12-06 19:29:09,023 INFO L858 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2021-12-06 19:29:09,023 INFO L858 garLoopResultBuilder]: For program point L431-1(lines 431 437) no Hoare annotation was computed. [2021-12-06 19:29:09,023 INFO L861 garLoopResultBuilder]: At program point L171(lines 108 175) the Hoare annotation is: true [2021-12-06 19:29:09,023 INFO L858 garLoopResultBuilder]: For program point L138(lines 138 144) no Hoare annotation was computed. [2021-12-06 19:29:09,023 INFO L858 garLoopResultBuilder]: For program point L138-1(lines 138 144) no Hoare annotation was computed. [2021-12-06 19:29:09,023 INFO L854 garLoopResultBuilder]: At program point L613(lines 609 615) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-06 19:29:09,023 INFO L854 garLoopResultBuilder]: At program point L130(line 130) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2021-12-06 19:29:09,023 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 223 247) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-06 19:29:09,023 INFO L854 garLoopResultBuilder]: At program point L539(lines 530 543) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2021-12-06 19:29:09,024 INFO L854 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 19:29:09,024 INFO L858 garLoopResultBuilder]: For program point L242-1(lines 223 247) no Hoare annotation was computed. [2021-12-06 19:29:09,024 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 223 247) no Hoare annotation was computed. [2021-12-06 19:29:09,024 INFO L858 garLoopResultBuilder]: For program point L315(lines 315 321) no Hoare annotation was computed. [2021-12-06 19:29:09,024 INFO L854 garLoopResultBuilder]: At program point L313(line 313) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) .cse1))) [2021-12-06 19:29:09,024 INFO L854 garLoopResultBuilder]: At program point L315-2(lines 308 324) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) .cse0) .cse1 (and (= ~pumpRunning~0 0) .cse0) .cse2)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 19:29:09,024 INFO L858 garLoopResultBuilder]: For program point L313-1(line 313) no Hoare annotation was computed. [2021-12-06 19:29:09,024 INFO L858 garLoopResultBuilder]: For program point L534(lines 534 540) no Hoare annotation was computed. [2021-12-06 19:29:09,024 INFO L854 garLoopResultBuilder]: At program point L404(lines 389 407) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse1)))) [2021-12-06 19:29:09,024 INFO L854 garLoopResultBuilder]: At program point L305(lines 300 307) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2021-12-06 19:29:09,024 INFO L858 garLoopResultBuilder]: For program point L398(lines 398 402) no Hoare annotation was computed. [2021-12-06 19:29:09,024 INFO L854 garLoopResultBuilder]: At program point L237(line 237) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))))) [2021-12-06 19:29:09,024 INFO L858 garLoopResultBuilder]: For program point L398-2(lines 398 402) no Hoare annotation was computed. [2021-12-06 19:29:09,024 INFO L858 garLoopResultBuilder]: For program point L231(lines 231 239) no Hoare annotation was computed. [2021-12-06 19:29:09,025 INFO L858 garLoopResultBuilder]: For program point L227(lines 227 244) no Hoare annotation was computed. [2021-12-06 19:29:09,025 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 465 476) no Hoare annotation was computed. [2021-12-06 19:29:09,025 INFO L858 garLoopResultBuilder]: For program point L469-1(lines 465 476) no Hoare annotation was computed. [2021-12-06 19:29:09,025 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 465 476) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse1 .cse3))) [2021-12-06 19:29:09,025 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 333 343) the Hoare annotation is: true [2021-12-06 19:29:09,025 INFO L861 garLoopResultBuilder]: At program point L494(lines 489 497) the Hoare annotation is: true [2021-12-06 19:29:09,025 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 333 343) no Hoare annotation was computed. [2021-12-06 19:29:09,025 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 333 343) no Hoare annotation was computed. [2021-12-06 19:29:09,027 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 19:29:09,028 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 19:29:09,050 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 07:29:09 BoogieIcfgContainer [2021-12-06 19:29:09,050 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 19:29:09,051 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 19:29:09,051 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 19:29:09,051 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 19:29:09,051 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 07:29:02" (3/4) ... [2021-12-06 19:29:09,053 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-06 19:29:09,058 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-06 19:29:09,065 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-06 19:29:09,066 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 19:29:09,066 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 19:29:09,067 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 19:29:09,067 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 19:29:09,067 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 19:29:09,068 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 19:29:09,084 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 19:29:09,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 19:29:09,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-06 19:29:09,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2)) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2021-12-06 19:29:09,086 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2021-12-06 19:29:09,086 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 19:29:09,086 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2021-12-06 19:29:09,086 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) [2021-12-06 19:29:09,086 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2021-12-06 19:29:09,087 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 19:29:09,087 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive [2021-12-06 19:29:09,087 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) [2021-12-06 19:29:09,088 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-12-06 19:29:09,088 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-12-06 19:29:09,088 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2021-12-06 19:29:09,088 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-12-06 19:29:09,088 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-12-06 19:29:09,088 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) [2021-12-06 19:29:09,116 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 19:29:09,116 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 19:29:09,117 INFO L158 Benchmark]: Toolchain (without parser) took 7818.71ms. Allocated memory was 92.3MB in the beginning and 161.5MB in the end (delta: 69.2MB). Free memory was 56.5MB in the beginning and 136.0MB in the end (delta: -79.5MB). Peak memory consumption was 82.1MB. Max. memory is 16.1GB. [2021-12-06 19:29:09,117 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 75.5MB. Free memory was 53.3MB in the beginning and 53.3MB in the end (delta: 28.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 19:29:09,117 INFO L158 Benchmark]: CACSL2BoogieTranslator took 318.39ms. Allocated memory is still 92.3MB. Free memory was 56.2MB in the beginning and 59.5MB in the end (delta: -3.3MB). Peak memory consumption was 10.1MB. Max. memory is 16.1GB. [2021-12-06 19:29:09,118 INFO L158 Benchmark]: Boogie Procedure Inliner took 38.32ms. Allocated memory is still 92.3MB. Free memory was 59.5MB in the beginning and 56.8MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 19:29:09,118 INFO L158 Benchmark]: Boogie Preprocessor took 22.46ms. Allocated memory is still 92.3MB. Free memory was 56.8MB in the beginning and 55.3MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 19:29:09,118 INFO L158 Benchmark]: RCFGBuilder took 383.45ms. Allocated memory was 92.3MB in the beginning and 111.1MB in the end (delta: 18.9MB). Free memory was 55.0MB in the beginning and 79.6MB in the end (delta: -24.6MB). Peak memory consumption was 14.3MB. Max. memory is 16.1GB. [2021-12-06 19:29:09,119 INFO L158 Benchmark]: TraceAbstraction took 6985.52ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 79.1MB in the beginning and 51.9MB in the end (delta: 27.1MB). Peak memory consumption was 85.2MB. Max. memory is 16.1GB. [2021-12-06 19:29:09,119 INFO L158 Benchmark]: Witness Printer took 65.43ms. Allocated memory is still 161.5MB. Free memory was 51.9MB in the beginning and 136.0MB in the end (delta: -84.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-06 19:29:09,121 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 75.5MB. Free memory was 53.3MB in the beginning and 53.3MB in the end (delta: 28.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 318.39ms. Allocated memory is still 92.3MB. Free memory was 56.2MB in the beginning and 59.5MB in the end (delta: -3.3MB). Peak memory consumption was 10.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 38.32ms. Allocated memory is still 92.3MB. Free memory was 59.5MB in the beginning and 56.8MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 22.46ms. Allocated memory is still 92.3MB. Free memory was 56.8MB in the beginning and 55.3MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 383.45ms. Allocated memory was 92.3MB in the beginning and 111.1MB in the end (delta: 18.9MB). Free memory was 55.0MB in the beginning and 79.6MB in the end (delta: -24.6MB). Peak memory consumption was 14.3MB. Max. memory is 16.1GB. * TraceAbstraction took 6985.52ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 79.1MB in the beginning and 51.9MB in the end (delta: 27.1MB). Peak memory consumption was 85.2MB. Max. memory is 16.1GB. * Witness Printer took 65.43ms. Allocated memory is still 161.5MB. Free memory was 51.9MB in the beginning and 136.0MB in the end (delta: -84.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 658]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 118 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.9s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1955 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1913 mSDsluCounter, 5223 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3695 mSDsCounter, 652 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2764 IncrementalHoareTripleChecker+Invalid, 3416 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 652 mSolverCounterUnsat, 1528 mSDtfsCounter, 2764 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 482 GetRequests, 373 SyntacticMatches, 2 SemanticMatches, 107 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 682 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=658occurred in iteration=9, InterpolantAutomatonStates: 104, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 195 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 55 LocationsWithAnnotation, 1605 PreInvPairs, 1906 NumberOfFragments, 2123 HoareAnnotationTreeSize, 1605 FomulaSimplifications, 1910 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 55 FomulaSimplificationsInter, 12057 FormulaSimplificationTreeSizeReductionInter, 2.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 722 NumberOfCodeBlocks, 722 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 833 ConstructedInterpolants, 0 QuantifiedInterpolants, 1563 SizeOfPredicates, 3 NumberOfNonLiveVariables, 541 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 121/153 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 674]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2)) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 389]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) - InvariantResult [Line: 681]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 544]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2021-12-06 19:29:09,163 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3bf9d808-218b-4722-8dc4-3ab2f9cd6dc8/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE