./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 05:00:26,297 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 05:00:26,300 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 05:00:26,345 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 05:00:26,346 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 05:00:26,347 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 05:00:26,351 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 05:00:26,354 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 05:00:26,356 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 05:00:26,364 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 05:00:26,365 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 05:00:26,370 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 05:00:26,370 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 05:00:26,372 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 05:00:26,373 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 05:00:26,377 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 05:00:26,378 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 05:00:26,380 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 05:00:26,381 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 05:00:26,388 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 05:00:26,390 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 05:00:26,391 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 05:00:26,392 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 05:00:26,394 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 05:00:26,396 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 05:00:26,398 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 05:00:26,399 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 05:00:26,399 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 05:00:26,400 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 05:00:26,400 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 05:00:26,401 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 05:00:26,402 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 05:00:26,403 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 05:00:26,404 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 05:00:26,405 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 05:00:26,406 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 05:00:26,406 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 05:00:26,407 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 05:00:26,407 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 05:00:26,407 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 05:00:26,408 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 05:00:26,409 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 05:00:26,417 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-21 05:00:26,446 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 05:00:26,447 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 05:00:26,447 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 05:00:26,447 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 05:00:26,448 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 05:00:26,448 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 05:00:26,449 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 05:00:26,450 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 05:00:26,450 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 05:00:26,451 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 05:00:26,451 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-21 05:00:26,451 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-21 05:00:26,451 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-21 05:00:26,451 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 05:00:26,452 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 05:00:26,452 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 05:00:26,452 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 05:00:26,452 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-21 05:00:26,453 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 05:00:26,453 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 05:00:26,453 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 05:00:26,453 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 05:00:26,453 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 05:00:26,454 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 05:00:26,454 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:00:26,454 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 05:00:26,454 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 05:00:26,454 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 05:00:26,455 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-21 05:00:26,455 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-21 05:00:26,455 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 05:00:26,455 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 05:00:26,456 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 05:00:26,456 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 [2022-07-21 05:00:26,779 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 05:00:26,806 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 05:00:26,808 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 05:00:26,809 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 05:00:26,809 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 05:00:26,811 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2022-07-21 05:00:26,878 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0630b170c/fc22b9060e2d49548d9debb6d124922b/FLAGfdf9a537f [2022-07-21 05:00:27,415 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 05:00:27,416 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2022-07-21 05:00:27,432 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0630b170c/fc22b9060e2d49548d9debb6d124922b/FLAGfdf9a537f [2022-07-21 05:00:27,894 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0630b170c/fc22b9060e2d49548d9debb6d124922b [2022-07-21 05:00:27,896 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 05:00:27,897 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 05:00:27,899 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 05:00:27,899 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 05:00:27,902 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 05:00:27,903 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:00:27" (1/1) ... [2022-07-21 05:00:27,904 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@18748f49 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:27, skipping insertion in model container [2022-07-21 05:00:27,904 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:00:27" (1/1) ... [2022-07-21 05:00:27,910 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 05:00:27,952 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 05:00:28,160 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-07-21 05:00:28,220 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:00:28,228 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 05:00:28,278 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-07-21 05:00:28,307 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:00:28,324 INFO L208 MainTranslator]: Completed translation [2022-07-21 05:00:28,324 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28 WrapperNode [2022-07-21 05:00:28,325 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 05:00:28,326 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 05:00:28,326 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 05:00:28,326 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 05:00:28,335 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,349 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,390 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 262 [2022-07-21 05:00:28,391 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 05:00:28,392 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 05:00:28,392 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 05:00:28,392 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 05:00:28,399 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,399 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,402 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,402 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,408 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,413 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,415 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,417 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 05:00:28,418 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 05:00:28,418 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 05:00:28,419 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 05:00:28,419 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (1/1) ... [2022-07-21 05:00:28,426 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:00:28,447 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:28,459 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 05:00:28,461 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 05:00:28,504 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 05:00:28,505 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-21 05:00:28,505 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-21 05:00:28,506 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-21 05:00:28,506 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-21 05:00:28,506 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-21 05:00:28,506 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-21 05:00:28,511 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-21 05:00:28,511 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-21 05:00:28,512 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:00:28,512 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:00:28,512 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-21 05:00:28,512 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-21 05:00:28,512 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-21 05:00:28,512 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-21 05:00:28,512 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-21 05:00:28,513 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-21 05:00:28,513 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-21 05:00:28,513 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 05:00:28,513 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 05:00:28,617 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 05:00:28,619 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 05:00:28,958 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 05:00:28,964 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 05:00:28,965 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-21 05:00:28,967 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:00:28 BoogieIcfgContainer [2022-07-21 05:00:28,967 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 05:00:28,969 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 05:00:28,969 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 05:00:28,972 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 05:00:28,973 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 05:00:27" (1/3) ... [2022-07-21 05:00:28,973 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@30ce8913 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:00:28, skipping insertion in model container [2022-07-21 05:00:28,974 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:28" (2/3) ... [2022-07-21 05:00:28,974 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@30ce8913 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:00:28, skipping insertion in model container [2022-07-21 05:00:28,974 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:00:28" (3/3) ... [2022-07-21 05:00:28,976 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product51.cil.c [2022-07-21 05:00:28,989 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 05:00:28,990 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 05:00:29,053 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 05:00:29,061 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@710833a4, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@23214f18 [2022-07-21 05:00:29,061 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 05:00:29,072 INFO L276 IsEmpty]: Start isEmpty. Operand has 95 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-21 05:00:29,086 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-21 05:00:29,086 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:29,087 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:29,087 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:29,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:29,094 INFO L85 PathProgramCache]: Analyzing trace with hash -6194419, now seen corresponding path program 1 times [2022-07-21 05:00:29,102 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:29,102 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [930273807] [2022-07-21 05:00:29,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:29,103 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:29,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:29,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:00:29,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:29,355 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:29,356 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:29,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [930273807] [2022-07-21 05:00:29,357 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [930273807] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:29,358 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:29,358 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-21 05:00:29,363 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1644006797] [2022-07-21 05:00:29,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:29,369 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-21 05:00:29,369 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:29,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-21 05:00:29,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:00:29,403 INFO L87 Difference]: Start difference. First operand has 95 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:29,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:29,452 INFO L93 Difference]: Finished difference Result 181 states and 246 transitions. [2022-07-21 05:00:29,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-21 05:00:29,454 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-21 05:00:29,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:29,468 INFO L225 Difference]: With dead ends: 181 [2022-07-21 05:00:29,468 INFO L226 Difference]: Without dead ends: 86 [2022-07-21 05:00:29,473 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:00:29,477 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:29,478 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:29,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-07-21 05:00:29,523 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-07-21 05:00:29,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 65 states have (on average 1.323076923076923) internal successors, (86), 73 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-07-21 05:00:29,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2022-07-21 05:00:29,538 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 25 [2022-07-21 05:00:29,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:29,539 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2022-07-21 05:00:29,539 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:29,539 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2022-07-21 05:00:29,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-21 05:00:29,543 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:29,543 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:29,543 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-21 05:00:29,543 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:29,545 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:29,545 INFO L85 PathProgramCache]: Analyzing trace with hash -1341011652, now seen corresponding path program 1 times [2022-07-21 05:00:29,545 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:29,546 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1730655797] [2022-07-21 05:00:29,546 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:29,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:29,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:29,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-21 05:00:29,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:29,654 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:29,657 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:29,657 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1730655797] [2022-07-21 05:00:29,658 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1730655797] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:29,658 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:29,658 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 05:00:29,659 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [883497891] [2022-07-21 05:00:29,659 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:29,660 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:00:29,661 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:29,662 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:00:29,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:00:29,669 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:29,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:29,688 INFO L93 Difference]: Finished difference Result 133 states and 171 transitions. [2022-07-21 05:00:29,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:00:29,690 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-21 05:00:29,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:29,692 INFO L225 Difference]: With dead ends: 133 [2022-07-21 05:00:29,693 INFO L226 Difference]: Without dead ends: 77 [2022-07-21 05:00:29,695 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:00:29,697 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 16 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:29,699 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 175 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:29,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-07-21 05:00:29,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-07-21 05:00:29,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 67 states have internal predecessors, (79), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-07-21 05:00:29,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 99 transitions. [2022-07-21 05:00:29,709 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 99 transitions. Word has length 26 [2022-07-21 05:00:29,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:29,710 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 99 transitions. [2022-07-21 05:00:29,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:29,710 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 99 transitions. [2022-07-21 05:00:29,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-21 05:00:29,711 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:29,712 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:29,712 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-21 05:00:29,712 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:29,713 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:29,713 INFO L85 PathProgramCache]: Analyzing trace with hash 1026962067, now seen corresponding path program 1 times [2022-07-21 05:00:29,713 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:29,713 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709386000] [2022-07-21 05:00:29,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:29,714 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:29,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:29,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:00:29,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:29,836 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:29,837 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:29,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709386000] [2022-07-21 05:00:29,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1709386000] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:29,838 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:29,838 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:00:29,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394707139] [2022-07-21 05:00:29,838 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:29,839 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:00:29,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:29,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:00:29,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:00:29,840 INFO L87 Difference]: Start difference. First operand 77 states and 99 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:29,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:29,974 INFO L93 Difference]: Finished difference Result 257 states and 338 transitions. [2022-07-21 05:00:29,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 05:00:29,974 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-07-21 05:00:29,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:29,976 INFO L225 Difference]: With dead ends: 257 [2022-07-21 05:00:29,977 INFO L226 Difference]: Without dead ends: 188 [2022-07-21 05:00:29,977 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-21 05:00:29,978 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 267 mSDsluCounter, 330 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 267 SdHoareTripleChecker+Valid, 453 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:29,979 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [267 Valid, 453 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:00:29,980 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2022-07-21 05:00:30,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 182. [2022-07-21 05:00:30,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 137 states have (on average 1.3722627737226278) internal successors, (188), 155 states have internal predecessors, (188), 25 states have call successors, (25), 19 states have call predecessors, (25), 19 states have return successors, (26), 17 states have call predecessors, (26), 25 states have call successors, (26) [2022-07-21 05:00:30,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 239 transitions. [2022-07-21 05:00:30,008 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 239 transitions. Word has length 30 [2022-07-21 05:00:30,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:30,008 INFO L495 AbstractCegarLoop]: Abstraction has 182 states and 239 transitions. [2022-07-21 05:00:30,008 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:30,009 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 239 transitions. [2022-07-21 05:00:30,010 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-07-21 05:00:30,010 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:30,010 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:30,011 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-21 05:00:30,011 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:30,011 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:30,011 INFO L85 PathProgramCache]: Analyzing trace with hash 591965277, now seen corresponding path program 1 times [2022-07-21 05:00:30,012 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:30,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [381250810] [2022-07-21 05:00:30,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:30,012 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:30,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 05:00:30,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,066 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:30,067 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:30,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [381250810] [2022-07-21 05:00:30,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [381250810] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:30,067 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:30,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 05:00:30,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1888060880] [2022-07-21 05:00:30,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:30,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:00:30,069 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:30,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:00:30,069 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:00:30,070 INFO L87 Difference]: Start difference. First operand 182 states and 239 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:30,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:30,120 INFO L93 Difference]: Finished difference Result 446 states and 601 transitions. [2022-07-21 05:00:30,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 05:00:30,120 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-07-21 05:00:30,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:30,123 INFO L225 Difference]: With dead ends: 446 [2022-07-21 05:00:30,123 INFO L226 Difference]: Without dead ends: 272 [2022-07-21 05:00:30,124 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:00:30,125 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 57 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 377 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:30,125 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 377 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:30,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-07-21 05:00:30,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 255. [2022-07-21 05:00:30,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 192 states have (on average 1.3125) internal successors, (252), 209 states have internal predecessors, (252), 32 states have call successors, (32), 30 states have call predecessors, (32), 30 states have return successors, (42), 29 states have call predecessors, (42), 32 states have call successors, (42) [2022-07-21 05:00:30,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 326 transitions. [2022-07-21 05:00:30,148 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 326 transitions. Word has length 34 [2022-07-21 05:00:30,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:30,148 INFO L495 AbstractCegarLoop]: Abstraction has 255 states and 326 transitions. [2022-07-21 05:00:30,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:30,156 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 326 transitions. [2022-07-21 05:00:30,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-21 05:00:30,157 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:30,157 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:30,158 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-21 05:00:30,158 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:30,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:30,159 INFO L85 PathProgramCache]: Analyzing trace with hash -2050243753, now seen corresponding path program 1 times [2022-07-21 05:00:30,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:30,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1406751075] [2022-07-21 05:00:30,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:30,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:30,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:00:30,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-21 05:00:30,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,226 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:30,226 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:30,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1406751075] [2022-07-21 05:00:30,227 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1406751075] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:30,227 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:30,227 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:00:30,227 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [270499734] [2022-07-21 05:00:30,228 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:30,228 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:00:30,228 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:30,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:00:30,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:00:30,229 INFO L87 Difference]: Start difference. First operand 255 states and 326 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-21 05:00:30,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:30,363 INFO L93 Difference]: Finished difference Result 562 states and 730 transitions. [2022-07-21 05:00:30,363 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 05:00:30,363 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-21 05:00:30,364 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:30,366 INFO L225 Difference]: With dead ends: 562 [2022-07-21 05:00:30,366 INFO L226 Difference]: Without dead ends: 315 [2022-07-21 05:00:30,367 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-21 05:00:30,368 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 63 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 370 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:30,368 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 370 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:00:30,369 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 315 states. [2022-07-21 05:00:30,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 315 to 307. [2022-07-21 05:00:30,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 234 states have (on average 1.2905982905982907) internal successors, (302), 251 states have internal predecessors, (302), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (52), 37 states have call predecessors, (52), 36 states have call successors, (52) [2022-07-21 05:00:30,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 390 transitions. [2022-07-21 05:00:30,388 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 390 transitions. Word has length 44 [2022-07-21 05:00:30,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:30,389 INFO L495 AbstractCegarLoop]: Abstraction has 307 states and 390 transitions. [2022-07-21 05:00:30,389 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-21 05:00:30,389 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 390 transitions. [2022-07-21 05:00:30,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-21 05:00:30,390 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:30,391 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:30,391 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-21 05:00:30,395 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:30,396 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:30,397 INFO L85 PathProgramCache]: Analyzing trace with hash 555779801, now seen corresponding path program 1 times [2022-07-21 05:00:30,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:30,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [955965830] [2022-07-21 05:00:30,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:30,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:30,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:00:30,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-21 05:00:30,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,457 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:30,457 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:30,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [955965830] [2022-07-21 05:00:30,458 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [955965830] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:30,458 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:30,458 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 05:00:30,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1626782211] [2022-07-21 05:00:30,458 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:30,459 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:00:30,459 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:30,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:00:30,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:00:30,460 INFO L87 Difference]: Start difference. First operand 307 states and 390 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-21 05:00:30,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:30,556 INFO L93 Difference]: Finished difference Result 624 states and 813 transitions. [2022-07-21 05:00:30,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 05:00:30,557 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-21 05:00:30,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:30,560 INFO L225 Difference]: With dead ends: 624 [2022-07-21 05:00:30,560 INFO L226 Difference]: Without dead ends: 325 [2022-07-21 05:00:30,561 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:00:30,562 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 67 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:30,562 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 291 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:00:30,563 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-07-21 05:00:30,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 311. [2022-07-21 05:00:30,581 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 238 states have (on average 1.2857142857142858) internal successors, (306), 255 states have internal predecessors, (306), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (52), 37 states have call predecessors, (52), 36 states have call successors, (52) [2022-07-21 05:00:30,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 394 transitions. [2022-07-21 05:00:30,583 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 394 transitions. Word has length 44 [2022-07-21 05:00:30,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:30,584 INFO L495 AbstractCegarLoop]: Abstraction has 311 states and 394 transitions. [2022-07-21 05:00:30,584 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-21 05:00:30,584 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 394 transitions. [2022-07-21 05:00:30,585 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-21 05:00:30,586 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:30,586 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:30,586 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-21 05:00:30,586 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:30,587 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:30,587 INFO L85 PathProgramCache]: Analyzing trace with hash 978481627, now seen corresponding path program 1 times [2022-07-21 05:00:30,587 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:30,587 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1036795522] [2022-07-21 05:00:30,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:30,588 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:30,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:00:30,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-21 05:00:30,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,638 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:30,639 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:30,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1036795522] [2022-07-21 05:00:30,639 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1036795522] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:30,639 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:30,639 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 05:00:30,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [178941127] [2022-07-21 05:00:30,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:30,640 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:00:30,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:30,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:00:30,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:00:30,641 INFO L87 Difference]: Start difference. First operand 311 states and 394 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-21 05:00:30,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:30,857 INFO L93 Difference]: Finished difference Result 924 states and 1218 transitions. [2022-07-21 05:00:30,857 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 05:00:30,858 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-21 05:00:30,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:30,861 INFO L225 Difference]: With dead ends: 924 [2022-07-21 05:00:30,861 INFO L226 Difference]: Without dead ends: 621 [2022-07-21 05:00:30,863 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:00:30,864 INFO L413 NwaCegarLoop]: 144 mSDtfsCounter, 212 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 325 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:30,864 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 325 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:00:30,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 621 states. [2022-07-21 05:00:30,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 621 to 614. [2022-07-21 05:00:30,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 614 states, 466 states have (on average 1.2553648068669527) internal successors, (585), 495 states have internal predecessors, (585), 75 states have call successors, (75), 71 states have call predecessors, (75), 72 states have return successors, (120), 73 states have call predecessors, (120), 75 states have call successors, (120) [2022-07-21 05:00:30,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 780 transitions. [2022-07-21 05:00:30,897 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 780 transitions. Word has length 44 [2022-07-21 05:00:30,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:30,898 INFO L495 AbstractCegarLoop]: Abstraction has 614 states and 780 transitions. [2022-07-21 05:00:30,898 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-21 05:00:30,898 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 780 transitions. [2022-07-21 05:00:30,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-07-21 05:00:30,899 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:30,900 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:30,900 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-21 05:00:30,900 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:30,900 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:30,900 INFO L85 PathProgramCache]: Analyzing trace with hash 319309813, now seen corresponding path program 1 times [2022-07-21 05:00:30,901 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:30,901 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1509562486] [2022-07-21 05:00:30,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:30,901 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:30,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:30,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 05:00:30,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-21 05:00:30,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:30,958 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:30,958 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:30,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1509562486] [2022-07-21 05:00:30,958 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1509562486] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:30,958 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:30,959 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 05:00:30,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2049981004] [2022-07-21 05:00:30,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:30,959 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:00:30,959 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:30,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:00:30,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:00:30,960 INFO L87 Difference]: Start difference. First operand 614 states and 780 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-21 05:00:31,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:31,243 INFO L93 Difference]: Finished difference Result 1205 states and 1620 transitions. [2022-07-21 05:00:31,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 05:00:31,244 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 48 [2022-07-21 05:00:31,245 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:31,252 INFO L225 Difference]: With dead ends: 1205 [2022-07-21 05:00:31,252 INFO L226 Difference]: Without dead ends: 1203 [2022-07-21 05:00:31,253 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-21 05:00:31,254 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 294 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 116 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 259 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 116 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:31,254 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [298 Valid, 259 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [116 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:00:31,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1203 states. [2022-07-21 05:00:31,330 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1203 to 1063. [2022-07-21 05:00:31,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1063 states, 808 states have (on average 1.25990099009901) internal successors, (1018), 869 states have internal predecessors, (1018), 134 states have call successors, (134), 104 states have call predecessors, (134), 120 states have return successors, (290), 125 states have call predecessors, (290), 134 states have call successors, (290) [2022-07-21 05:00:31,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1063 states to 1063 states and 1442 transitions. [2022-07-21 05:00:31,339 INFO L78 Accepts]: Start accepts. Automaton has 1063 states and 1442 transitions. Word has length 48 [2022-07-21 05:00:31,340 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:31,340 INFO L495 AbstractCegarLoop]: Abstraction has 1063 states and 1442 transitions. [2022-07-21 05:00:31,340 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-21 05:00:31,340 INFO L276 IsEmpty]: Start isEmpty. Operand 1063 states and 1442 transitions. [2022-07-21 05:00:31,343 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2022-07-21 05:00:31,344 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:31,344 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:31,344 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-21 05:00:31,345 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:31,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:31,345 INFO L85 PathProgramCache]: Analyzing trace with hash 706311904, now seen corresponding path program 1 times [2022-07-21 05:00:31,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:31,346 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [169540555] [2022-07-21 05:00:31,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:31,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:31,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:31,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:31,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:31,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:00:31,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:31,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:00:31,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:31,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-21 05:00:31,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:31,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-21 05:00:31,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:31,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-07-21 05:00:31,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:31,449 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-21 05:00:31,450 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:31,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [169540555] [2022-07-21 05:00:31,450 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [169540555] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:00:31,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1584053983] [2022-07-21 05:00:31,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:31,451 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:31,451 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:31,452 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:00:31,464 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-21 05:00:31,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:31,571 INFO L263 TraceCheckSpWp]: Trace formula consists of 456 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-21 05:00:31,577 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:00:31,655 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:31,656 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:00:31,656 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1584053983] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:31,656 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:00:31,657 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-07-21 05:00:31,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1264725831] [2022-07-21 05:00:31,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:31,657 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:00:31,658 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:31,658 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:00:31,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-21 05:00:31,659 INFO L87 Difference]: Start difference. First operand 1063 states and 1442 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-21 05:00:31,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:31,719 INFO L93 Difference]: Finished difference Result 1868 states and 2582 transitions. [2022-07-21 05:00:31,720 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:00:31,720 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 86 [2022-07-21 05:00:31,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:31,725 INFO L225 Difference]: With dead ends: 1868 [2022-07-21 05:00:31,725 INFO L226 Difference]: Without dead ends: 944 [2022-07-21 05:00:31,730 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 106 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-21 05:00:31,730 INFO L413 NwaCegarLoop]: 139 mSDtfsCounter, 42 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:31,731 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 206 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:31,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 944 states. [2022-07-21 05:00:31,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 944 to 944. [2022-07-21 05:00:31,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 944 states, 716 states have (on average 1.2318435754189945) internal successors, (882), 769 states have internal predecessors, (882), 119 states have call successors, (119), 99 states have call predecessors, (119), 108 states have return successors, (188), 109 states have call predecessors, (188), 119 states have call successors, (188) [2022-07-21 05:00:31,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 944 states to 944 states and 1189 transitions. [2022-07-21 05:00:31,796 INFO L78 Accepts]: Start accepts. Automaton has 944 states and 1189 transitions. Word has length 86 [2022-07-21 05:00:31,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:31,797 INFO L495 AbstractCegarLoop]: Abstraction has 944 states and 1189 transitions. [2022-07-21 05:00:31,797 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-21 05:00:31,797 INFO L276 IsEmpty]: Start isEmpty. Operand 944 states and 1189 transitions. [2022-07-21 05:00:31,799 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-07-21 05:00:31,799 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:31,799 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:31,837 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-21 05:00:32,026 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:32,026 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:32,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:32,027 INFO L85 PathProgramCache]: Analyzing trace with hash -2067995951, now seen corresponding path program 1 times [2022-07-21 05:00:32,027 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:32,027 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [997309292] [2022-07-21 05:00:32,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:32,027 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:32,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:32,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:00:32,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:00:32,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-21 05:00:32,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-21 05:00:32,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:32,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-21 05:00:32,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,138 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-21 05:00:32,138 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:32,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [997309292] [2022-07-21 05:00:32,138 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [997309292] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:00:32,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [527282102] [2022-07-21 05:00:32,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:32,139 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:32,139 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:32,140 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:00:32,143 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-21 05:00:32,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,240 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-21 05:00:32,243 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:00:32,285 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-21 05:00:32,285 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:00:32,285 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [527282102] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:32,285 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:00:32,286 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2022-07-21 05:00:32,286 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [726971393] [2022-07-21 05:00:32,286 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:32,287 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:00:32,287 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:32,287 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:00:32,288 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2022-07-21 05:00:32,288 INFO L87 Difference]: Start difference. First operand 944 states and 1189 transitions. Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-21 05:00:32,370 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:32,370 INFO L93 Difference]: Finished difference Result 1821 states and 2347 transitions. [2022-07-21 05:00:32,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 05:00:32,371 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 89 [2022-07-21 05:00:32,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:32,376 INFO L225 Difference]: With dead ends: 1821 [2022-07-21 05:00:32,376 INFO L226 Difference]: Without dead ends: 1016 [2022-07-21 05:00:32,381 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2022-07-21 05:00:32,382 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 33 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 400 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:32,383 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 400 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:32,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1016 states. [2022-07-21 05:00:32,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1016 to 968. [2022-07-21 05:00:32,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 968 states, 740 states have (on average 1.2243243243243243) internal successors, (906), 793 states have internal predecessors, (906), 119 states have call successors, (119), 99 states have call predecessors, (119), 108 states have return successors, (188), 109 states have call predecessors, (188), 119 states have call successors, (188) [2022-07-21 05:00:32,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 968 states to 968 states and 1213 transitions. [2022-07-21 05:00:32,438 INFO L78 Accepts]: Start accepts. Automaton has 968 states and 1213 transitions. Word has length 89 [2022-07-21 05:00:32,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:32,439 INFO L495 AbstractCegarLoop]: Abstraction has 968 states and 1213 transitions. [2022-07-21 05:00:32,440 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-21 05:00:32,440 INFO L276 IsEmpty]: Start isEmpty. Operand 968 states and 1213 transitions. [2022-07-21 05:00:32,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-07-21 05:00:32,443 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:32,444 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:32,464 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-07-21 05:00:32,647 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-21 05:00:32,648 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:32,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:32,648 INFO L85 PathProgramCache]: Analyzing trace with hash -1933982445, now seen corresponding path program 1 times [2022-07-21 05:00:32,648 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:32,648 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [447203893] [2022-07-21 05:00:32,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:32,649 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:32,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:32,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:00:32,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:00:32,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-21 05:00:32,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-21 05:00:32,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:32,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-21 05:00:32,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,759 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 20 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-07-21 05:00:32,759 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:32,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [447203893] [2022-07-21 05:00:32,759 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [447203893] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:00:32,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2060182508] [2022-07-21 05:00:32,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:32,760 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:32,760 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:32,761 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:00:32,785 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-21 05:00:32,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:32,861 INFO L263 TraceCheckSpWp]: Trace formula consists of 458 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-21 05:00:32,864 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:00:32,955 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:32,955 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:00:32,955 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2060182508] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:32,955 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:00:32,956 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-07-21 05:00:32,956 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [688594134] [2022-07-21 05:00:32,956 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:32,956 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:00:32,956 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:32,957 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:00:32,957 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=154, Unknown=0, NotChecked=0, Total=182 [2022-07-21 05:00:32,957 INFO L87 Difference]: Start difference. First operand 968 states and 1213 transitions. Second operand has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-21 05:00:33,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:33,060 INFO L93 Difference]: Finished difference Result 1540 states and 1945 transitions. [2022-07-21 05:00:33,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 05:00:33,065 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 89 [2022-07-21 05:00:33,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:33,069 INFO L225 Difference]: With dead ends: 1540 [2022-07-21 05:00:33,069 INFO L226 Difference]: Without dead ends: 711 [2022-07-21 05:00:33,072 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 94 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-07-21 05:00:33,073 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 145 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 491 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:33,073 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 491 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:33,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 711 states. [2022-07-21 05:00:33,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 711 to 663. [2022-07-21 05:00:33,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 663 states, 508 states have (on average 1.2224409448818898) internal successors, (621), 540 states have internal predecessors, (621), 75 states have call successors, (75), 73 states have call predecessors, (75), 79 states have return successors, (109), 75 states have call predecessors, (109), 75 states have call successors, (109) [2022-07-21 05:00:33,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 663 states to 663 states and 805 transitions. [2022-07-21 05:00:33,132 INFO L78 Accepts]: Start accepts. Automaton has 663 states and 805 transitions. Word has length 89 [2022-07-21 05:00:33,133 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:33,133 INFO L495 AbstractCegarLoop]: Abstraction has 663 states and 805 transitions. [2022-07-21 05:00:33,133 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-21 05:00:33,133 INFO L276 IsEmpty]: Start isEmpty. Operand 663 states and 805 transitions. [2022-07-21 05:00:33,135 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-07-21 05:00:33,135 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:33,136 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:33,167 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-21 05:00:33,359 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:33,360 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:33,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:33,360 INFO L85 PathProgramCache]: Analyzing trace with hash 692072967, now seen corresponding path program 1 times [2022-07-21 05:00:33,360 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:33,360 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597998235] [2022-07-21 05:00:33,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:33,361 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:33,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:33,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:33,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:33,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 05:00:33,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:33,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:00:33,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:33,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-21 05:00:33,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:33,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-21 05:00:33,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:33,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-21 05:00:33,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:33,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-07-21 05:00:33,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:33,462 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-07-21 05:00:33,462 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:33,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597998235] [2022-07-21 05:00:33,462 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597998235] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:00:33,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [322210478] [2022-07-21 05:00:33,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:33,463 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:33,463 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:33,465 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:00:33,466 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-21 05:00:33,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:33,557 INFO L263 TraceCheckSpWp]: Trace formula consists of 475 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-21 05:00:33,564 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:00:33,579 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-21 05:00:33,580 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:00:33,580 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [322210478] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:33,581 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:00:33,581 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 6 [2022-07-21 05:00:33,581 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [101979370] [2022-07-21 05:00:33,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:33,584 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:00:33,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:33,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:00:33,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:00:33,585 INFO L87 Difference]: Start difference. First operand 663 states and 805 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-21 05:00:33,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:33,610 INFO L93 Difference]: Finished difference Result 822 states and 1010 transitions. [2022-07-21 05:00:33,610 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:00:33,610 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 94 [2022-07-21 05:00:33,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:33,611 INFO L225 Difference]: With dead ends: 822 [2022-07-21 05:00:33,611 INFO L226 Difference]: Without dead ends: 0 [2022-07-21 05:00:33,613 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 106 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:00:33,613 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 38 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:33,613 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 200 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:33,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-21 05:00:33,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-21 05:00:33,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:00:33,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-21 05:00:33,615 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 94 [2022-07-21 05:00:33,615 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:33,615 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-21 05:00:33,616 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-21 05:00:33,616 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-21 05:00:33,616 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-21 05:00:33,618 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 05:00:33,646 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-07-21 05:00:33,843 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:33,844 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-21 05:00:36,717 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 226 233) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (< ~waterLevel~0 2) (= 0 ~systemActive~0)) (or .cse0 (not (= 1 ~systemActive~0)) .cse1 (not (<= 1 ~waterLevel~0))))) [2022-07-21 05:00:36,717 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 226 233) no Hoare annotation was computed. [2022-07-21 05:00:36,717 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 226 233) no Hoare annotation was computed. [2022-07-21 05:00:36,717 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 159 165) no Hoare annotation was computed. [2022-07-21 05:00:36,717 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 159 165) the Hoare annotation is: true [2022-07-21 05:00:36,717 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 449 460) the Hoare annotation is: true [2022-07-21 05:00:36,717 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2022-07-21 05:00:36,717 INFO L899 garLoopResultBuilder]: For program point L453-1(lines 449 460) no Hoare annotation was computed. [2022-07-21 05:00:36,717 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 461 469) the Hoare annotation is: true [2022-07-21 05:00:36,717 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 461 469) no Hoare annotation was computed. [2022-07-21 05:00:36,717 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 461 469) no Hoare annotation was computed. [2022-07-21 05:00:36,717 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 527 556) no Hoare annotation was computed. [2022-07-21 05:00:36,717 INFO L899 garLoopResultBuilder]: For program point L541(lines 541 545) no Hoare annotation was computed. [2022-07-21 05:00:36,718 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 527 556) the Hoare annotation is: true [2022-07-21 05:00:36,718 INFO L902 garLoopResultBuilder]: At program point L541-1(lines 541 545) the Hoare annotation is: true [2022-07-21 05:00:36,718 INFO L899 garLoopResultBuilder]: For program point L538(line 538) no Hoare annotation was computed. [2022-07-21 05:00:36,718 INFO L902 garLoopResultBuilder]: At program point L537-2(lines 537 551) the Hoare annotation is: true [2022-07-21 05:00:36,718 INFO L902 garLoopResultBuilder]: At program point L533(line 533) the Hoare annotation is: true [2022-07-21 05:00:36,718 INFO L899 garLoopResultBuilder]: For program point L533-1(line 533) no Hoare annotation was computed. [2022-07-21 05:00:36,718 INFO L902 garLoopResultBuilder]: At program point L552(lines 527 556) the Hoare annotation is: true [2022-07-21 05:00:36,718 INFO L899 garLoopResultBuilder]: For program point L548(line 548) no Hoare annotation was computed. [2022-07-21 05:00:36,719 INFO L895 garLoopResultBuilder]: At program point L250(lines 245 253) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2 .cse11)) (.cse8 (not (= 0 ~systemActive~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 .cse2 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse4 .cse5 .cse9 .cse10 .cse8) (or .cse4 .cse5 .cse0 (and (<= 1 ~pumpRunning~0) .cse6 (<= 2 ~waterLevel~0) .cse11) .cse9 (and .cse1 .cse2 .cse11)) (or .cse4 .cse5 .cse6 .cse7 .cse0) (or .cse4 .cse10 .cse8 .cse3)))) [2022-07-21 05:00:36,719 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 376) no Hoare annotation was computed. [2022-07-21 05:00:36,719 INFO L899 garLoopResultBuilder]: For program point L139-1(lines 138 157) no Hoare annotation was computed. [2022-07-21 05:00:36,719 INFO L899 garLoopResultBuilder]: For program point L362(lines 362 379) no Hoare annotation was computed. [2022-07-21 05:00:36,719 INFO L899 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2022-07-21 05:00:36,719 INFO L895 garLoopResultBuilder]: At program point L362-1(lines 354 382) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (and .cse5 .cse6 .cse10)) (.cse4 (not (= 0 ~systemActive~0))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not .cse7)) (.cse3 (not (<= 1 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse5 .cse6 .cse7 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse8 (not (<= 1 |old(~pumpRunning~0)|)) .cse9) (or .cse0 .cse2 .cse4 .cse9) (or .cse0 .cse1 .cse8 .cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse10) (and .cse5 .cse6 .cse7 .cse10))))) [2022-07-21 05:00:36,719 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 135 158) no Hoare annotation was computed. [2022-07-21 05:00:36,719 INFO L899 garLoopResultBuilder]: For program point L197(lines 197 214) no Hoare annotation was computed. [2022-07-21 05:00:36,720 INFO L899 garLoopResultBuilder]: For program point L627(line 627) no Hoare annotation was computed. [2022-07-21 05:00:36,720 INFO L899 garLoopResultBuilder]: For program point L367(lines 367 373) no Hoare annotation was computed. [2022-07-21 05:00:36,720 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 433) no Hoare annotation was computed. [2022-07-21 05:00:36,720 INFO L895 garLoopResultBuilder]: At program point L429-2(lines 425 436) the Hoare annotation is: (let ((.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse2) (or .cse0 .cse3 .cse5 .cse1))) [2022-07-21 05:00:36,720 INFO L899 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-07-21 05:00:36,720 INFO L899 garLoopResultBuilder]: For program point L318-2(lines 318 322) no Hoare annotation was computed. [2022-07-21 05:00:36,720 INFO L895 garLoopResultBuilder]: At program point L628(lines 623 630) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse3 .cse5 .cse1) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-07-21 05:00:36,720 INFO L895 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse3 .cse5 .cse1) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-07-21 05:00:36,720 INFO L895 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse3 (not (<= 1 |old(~pumpRunning~0)|)) .cse2) (or .cse0 .cse4 .cse3 .cse5) (or .cse0 .cse4 .cse5 .cse1))) [2022-07-21 05:00:36,720 INFO L895 garLoopResultBuilder]: At program point L521(lines 516 524) the Hoare annotation is: (let ((.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) .cse2) (or .cse0 .cse3 .cse5 .cse1))) [2022-07-21 05:00:36,720 INFO L895 garLoopResultBuilder]: At program point L360(line 360) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse9 .cse8)) (.cse7 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse4 .cse1 .cse7 (and (<= 1 ~pumpRunning~0) .cse5 (<= 2 ~waterLevel~0) .cse8) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse9 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse7 (not (<= 1 |old(~pumpRunning~0)|)) .cse3) (or .cse0 (and .cse9 .cse5 (= ~waterLevel~0 1)) .cse4 .cse6 .cse2)))) [2022-07-21 05:00:36,720 INFO L899 garLoopResultBuilder]: For program point L360-1(line 360) no Hoare annotation was computed. [2022-07-21 05:00:36,721 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= 0 ~systemActive~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse3 .cse4) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse5))) [2022-07-21 05:00:36,721 INFO L895 garLoopResultBuilder]: At program point L212-1(lines 193 217) the Hoare annotation is: (let ((.cse4 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse5) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse3 (and .cse6 .cse7) .cse5 (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse7) .cse8)) (or .cse0 .cse3 .cse8 .cse1) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse5 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-07-21 05:00:36,721 INFO L899 garLoopResultBuilder]: For program point L146-1(lines 146 152) no Hoare annotation was computed. [2022-07-21 05:00:36,721 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 135 158) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (and .cse6 (= ~methAndRunningLastTime~0 0) .cse7)) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse2 .cse3) (or .cse0 (and .cse6 .cse7) .cse4 .cse8) (or .cse5 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7) .cse8)))) [2022-07-21 05:00:36,721 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 135 158) no Hoare annotation was computed. [2022-07-21 05:00:36,721 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 627) no Hoare annotation was computed. [2022-07-21 05:00:36,721 INFO L895 garLoopResultBuilder]: At program point L324(lines 309 327) the Hoare annotation is: (let ((.cse1 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse1) (or .cse2 .cse3 .cse1) (or .cse2 .cse4 .cse0 .cse5) (or .cse2 .cse4 .cse5 .cse3))) [2022-07-21 05:00:36,721 INFO L899 garLoopResultBuilder]: For program point L609(lines 609 616) no Hoare annotation was computed. [2022-07-21 05:00:36,721 INFO L899 garLoopResultBuilder]: For program point L609-2(lines 609 616) no Hoare annotation was computed. [2022-07-21 05:00:36,721 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-07-21 05:00:36,721 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-07-21 05:00:36,722 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0) (= 0 ~systemActive~0)) (and (<= 1 ~pumpRunning~0) .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-21 05:00:36,722 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0) (= 0 ~systemActive~0)) (and (<= 1 ~pumpRunning~0) .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-21 05:00:36,722 INFO L902 garLoopResultBuilder]: At program point L618(lines 599 621) the Hoare annotation is: true [2022-07-21 05:00:36,722 INFO L895 garLoopResultBuilder]: At program point L585(lines 581 587) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2022-07-21 05:00:36,722 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-21 05:00:36,722 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-21 05:00:36,722 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-21 05:00:36,722 INFO L895 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-07-21 05:00:36,722 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2022-07-21 05:00:36,722 INFO L895 garLoopResultBuilder]: At program point L417(lines 412 420) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:00:36,722 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-21 05:00:36,722 INFO L895 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2022-07-21 05:00:36,722 INFO L899 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2022-07-21 05:00:36,723 INFO L895 garLoopResultBuilder]: At program point L409(lines 405 411) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:00:36,723 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0) (= 0 ~systemActive~0)) (and (<= 1 ~pumpRunning~0) .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-21 05:00:36,723 INFO L902 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2022-07-21 05:00:36,723 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-07-21 05:00:36,723 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-07-21 05:00:36,724 INFO L899 garLoopResultBuilder]: For program point L67(lines 67 71) no Hoare annotation was computed. [2022-07-21 05:00:36,724 INFO L895 garLoopResultBuilder]: At program point L340(lines 328 342) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 (<= 1 ~waterLevel~0) .cse2))) [2022-07-21 05:00:36,724 INFO L902 garLoopResultBuilder]: At program point L596(lines 588 598) the Hoare annotation is: true [2022-07-21 05:00:36,725 INFO L895 garLoopResultBuilder]: At program point L402(lines 398 404) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:00:36,725 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2022-07-21 05:00:36,725 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2022-07-21 05:00:36,725 INFO L899 garLoopResultBuilder]: For program point L332-1(lines 332 338) no Hoare annotation was computed. [2022-07-21 05:00:36,725 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2022-07-21 05:00:36,725 INFO L895 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0) .cse7) (and (<= 1 ~pumpRunning~0) .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-21 05:00:36,725 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 167 191) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2022-07-21 05:00:36,726 INFO L895 garLoopResultBuilder]: At program point L223(lines 218 225) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2022-07-21 05:00:36,726 INFO L899 garLoopResultBuilder]: For program point L506(lines 506 512) no Hoare annotation was computed. [2022-07-21 05:00:36,726 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2022-07-21 05:00:36,726 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 167 191) no Hoare annotation was computed. [2022-07-21 05:00:36,726 INFO L895 garLoopResultBuilder]: At program point L511(lines 502 515) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= 1 ~waterLevel~0)) .cse2))) [2022-07-21 05:00:36,726 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 167 191) no Hoare annotation was computed. [2022-07-21 05:00:36,727 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse4 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse4)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2) .cse3)))) [2022-07-21 05:00:36,727 INFO L895 garLoopResultBuilder]: At program point L305(lines 290 308) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse3) (or .cse0 .cse2 .cse1 (< ~waterLevel~0 2) .cse3))) [2022-07-21 05:00:36,727 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 183) no Hoare annotation was computed. [2022-07-21 05:00:36,727 INFO L899 garLoopResultBuilder]: For program point L171(lines 171 188) no Hoare annotation was computed. [2022-07-21 05:00:36,727 INFO L899 garLoopResultBuilder]: For program point L299(lines 299 303) no Hoare annotation was computed. [2022-07-21 05:00:36,727 INFO L899 garLoopResultBuilder]: For program point L299-2(lines 299 303) no Hoare annotation was computed. [2022-07-21 05:00:36,727 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2022-07-21 05:00:36,728 INFO L899 garLoopResultBuilder]: For program point L441-1(lines 437 448) no Hoare annotation was computed. [2022-07-21 05:00:36,728 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 437 448) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 .cse2) (or .cse3 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1) .cse4 .cse5) (or .cse3 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1 .cse4) (or .cse3 .cse1 .cse4 .cse5 .cse2))) [2022-07-21 05:00:36,731 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:36,733 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 05:00:36,759 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 05:00:36 BoogieIcfgContainer [2022-07-21 05:00:36,759 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 05:00:36,760 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 05:00:36,760 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 05:00:36,760 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 05:00:36,760 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:00:28" (3/4) ... [2022-07-21 05:00:36,763 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-21 05:00:36,773 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-21 05:00:36,773 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-21 05:00:36,773 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-21 05:00:36,773 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-21 05:00:36,773 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-21 05:00:36,774 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-21 05:00:36,774 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:00:36,774 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-21 05:00:36,780 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-07-21 05:00:36,782 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-21 05:00:36,782 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-21 05:00:36,782 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-21 05:00:36,783 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-21 05:00:36,783 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:00:36,784 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:00:36,804 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-21 05:00:36,805 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-07-21 05:00:36,805 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-07-21 05:00:36,805 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel == 1) && tmp == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) [2022-07-21 05:00:36,806 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) [2022-07-21 05:00:36,806 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-07-21 05:00:36,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) [2022-07-21 05:00:36,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) [2022-07-21 05:00:36,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) [2022-07-21 05:00:36,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-07-21 05:00:36,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) [2022-07-21 05:00:36,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-07-21 05:00:36,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) [2022-07-21 05:00:36,809 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0) [2022-07-21 05:00:36,837 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-21 05:00:36,837 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 05:00:36,837 INFO L158 Benchmark]: Toolchain (without parser) took 8940.14ms. Allocated memory was 54.5MB in the beginning and 134.2MB in the end (delta: 79.7MB). Free memory was 30.9MB in the beginning and 112.7MB in the end (delta: -81.7MB). Peak memory consumption was 76.6MB. Max. memory is 16.1GB. [2022-07-21 05:00:36,838 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 54.5MB. Free memory was 36.0MB in the beginning and 36.0MB in the end (delta: 46.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 05:00:36,838 INFO L158 Benchmark]: CACSL2BoogieTranslator took 425.65ms. Allocated memory was 54.5MB in the beginning and 67.1MB in the end (delta: 12.6MB). Free memory was 30.7MB in the beginning and 42.5MB in the end (delta: -11.8MB). Peak memory consumption was 5.7MB. Max. memory is 16.1GB. [2022-07-21 05:00:36,838 INFO L158 Benchmark]: Boogie Procedure Inliner took 65.26ms. Allocated memory is still 67.1MB. Free memory was 42.3MB in the beginning and 39.8MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-21 05:00:36,839 INFO L158 Benchmark]: Boogie Preprocessor took 25.91ms. Allocated memory is still 67.1MB. Free memory was 39.8MB in the beginning and 38.4MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:00:36,839 INFO L158 Benchmark]: RCFGBuilder took 549.05ms. Allocated memory is still 67.1MB. Free memory was 38.2MB in the beginning and 40.6MB in the end (delta: -2.3MB). Peak memory consumption was 12.4MB. Max. memory is 16.1GB. [2022-07-21 05:00:36,840 INFO L158 Benchmark]: TraceAbstraction took 7790.39ms. Allocated memory was 67.1MB in the beginning and 134.2MB in the end (delta: 67.1MB). Free memory was 40.0MB in the beginning and 41.3MB in the end (delta: -1.3MB). Peak memory consumption was 74.9MB. Max. memory is 16.1GB. [2022-07-21 05:00:36,840 INFO L158 Benchmark]: Witness Printer took 77.36ms. Allocated memory is still 134.2MB. Free memory was 41.3MB in the beginning and 112.7MB in the end (delta: -71.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-21 05:00:36,843 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 54.5MB. Free memory was 36.0MB in the beginning and 36.0MB in the end (delta: 46.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 425.65ms. Allocated memory was 54.5MB in the beginning and 67.1MB in the end (delta: 12.6MB). Free memory was 30.7MB in the beginning and 42.5MB in the end (delta: -11.8MB). Peak memory consumption was 5.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 65.26ms. Allocated memory is still 67.1MB. Free memory was 42.3MB in the beginning and 39.8MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 25.91ms. Allocated memory is still 67.1MB. Free memory was 39.8MB in the beginning and 38.4MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 549.05ms. Allocated memory is still 67.1MB. Free memory was 38.2MB in the beginning and 40.6MB in the end (delta: -2.3MB). Peak memory consumption was 12.4MB. Max. memory is 16.1GB. * TraceAbstraction took 7790.39ms. Allocated memory was 67.1MB in the beginning and 134.2MB in the end (delta: 67.1MB). Free memory was 40.0MB in the beginning and 41.3MB in the end (delta: -1.3MB). Peak memory consumption was 74.9MB. Max. memory is 16.1GB. * Witness Printer took 77.36ms. Allocated memory is still 134.2MB. Free memory was 41.3MB in the beginning and 112.7MB in the end (delta: -71.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 627]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 95 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.7s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1253 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1234 mSDsluCounter, 3667 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2274 mSDsCounter, 278 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 695 IncrementalHoareTripleChecker+Invalid, 973 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 278 mSolverCounterUnsat, 1393 mSDtfsCounter, 695 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 520 GetRequests, 443 SyntacticMatches, 2 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1063occurred in iteration=8, InterpolantAutomatonStates: 62, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 288 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1976 PreInvPairs, 2090 NumberOfFragments, 1921 HoareAnnotationTreeSize, 1976 FomulaSimplifications, 432 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 43 FomulaSimplificationsInter, 6088 FormulaSimplificationTreeSizeReductionInter, 2.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 1011 NumberOfCodeBlocks, 1011 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 995 ConstructedInterpolants, 0 QuantifiedInterpolants, 1608 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1848 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 240/248 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel == 1) && tmp == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 412]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 581]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 588]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 245]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-07-21 05:00:36,886 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE