./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 06:20:58,009 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 06:20:58,015 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 06:20:58,054 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 06:20:58,055 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 06:20:58,056 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 06:20:58,058 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 06:20:58,063 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 06:20:58,065 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 06:20:58,070 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 06:20:58,071 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 06:20:58,073 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 06:20:58,074 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 06:20:58,075 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 06:20:58,077 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 06:20:58,080 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 06:20:58,081 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 06:20:58,083 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 06:20:58,085 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 06:20:58,091 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 06:20:58,093 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 06:20:58,094 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 06:20:58,095 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 06:20:58,095 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 06:20:58,097 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 06:20:58,104 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 06:20:58,104 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 06:20:58,105 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 06:20:58,106 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 06:20:58,107 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 06:20:58,108 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 06:20:58,108 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 06:20:58,110 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 06:20:58,111 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 06:20:58,112 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 06:20:58,113 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 06:20:58,113 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 06:20:58,114 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 06:20:58,114 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 06:20:58,114 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 06:20:58,115 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 06:20:58,117 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 06:20:58,120 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-12 06:20:58,146 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 06:20:58,147 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 06:20:58,147 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 06:20:58,147 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 06:20:58,148 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 06:20:58,148 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 06:20:58,149 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 06:20:58,149 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 06:20:58,149 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 06:20:58,150 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 06:20:58,151 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-12 06:20:58,151 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 06:20:58,151 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-12 06:20:58,151 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 06:20:58,151 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 06:20:58,152 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 06:20:58,152 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 06:20:58,152 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-12 06:20:58,152 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 06:20:58,152 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 06:20:58,153 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 06:20:58,154 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 06:20:58,154 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 06:20:58,154 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 06:20:58,154 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:20:58,155 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 06:20:58,155 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 06:20:58,155 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 06:20:58,155 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 06:20:58,155 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 06:20:58,156 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 06:20:58,156 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 06:20:58,156 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 06:20:58,156 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 [2022-07-12 06:20:58,404 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 06:20:58,428 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 06:20:58,432 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 06:20:58,433 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 06:20:58,434 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 06:20:58,435 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2022-07-12 06:20:58,513 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cc411990a/d81e9edb74864783afe8090925d7b2dd/FLAGd0b3e2e6b [2022-07-12 06:20:58,956 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 06:20:58,956 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2022-07-12 06:20:58,967 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cc411990a/d81e9edb74864783afe8090925d7b2dd/FLAGd0b3e2e6b [2022-07-12 06:20:59,299 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cc411990a/d81e9edb74864783afe8090925d7b2dd [2022-07-12 06:20:59,302 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 06:20:59,304 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 06:20:59,306 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 06:20:59,307 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 06:20:59,309 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 06:20:59,310 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,311 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5d93505 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59, skipping insertion in model container [2022-07-12 06:20:59,311 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,318 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 06:20:59,370 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 06:20:59,656 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2022-07-12 06:20:59,704 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:20:59,720 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 06:20:59,797 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2022-07-12 06:20:59,816 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:20:59,841 INFO L208 MainTranslator]: Completed translation [2022-07-12 06:20:59,842 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59 WrapperNode [2022-07-12 06:20:59,842 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 06:20:59,843 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 06:20:59,844 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 06:20:59,844 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 06:20:59,850 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,865 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,896 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 270 [2022-07-12 06:20:59,896 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 06:20:59,897 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 06:20:59,897 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 06:20:59,897 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 06:20:59,905 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,905 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,908 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,918 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,923 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,927 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,944 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,947 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 06:20:59,948 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 06:20:59,948 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 06:20:59,948 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 06:20:59,949 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (1/1) ... [2022-07-12 06:20:59,963 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:20:59,975 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:20:59,997 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 06:21:00,019 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 06:21:00,041 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 06:21:00,041 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-12 06:21:00,042 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-12 06:21:00,042 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-12 06:21:00,042 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-12 06:21:00,042 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-12 06:21:00,042 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-12 06:21:00,043 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-12 06:21:00,044 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-12 06:21:00,044 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:21:00,044 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:21:00,044 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-07-12 06:21:00,045 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-07-12 06:21:00,045 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-12 06:21:00,045 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-12 06:21:00,045 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-12 06:21:00,045 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-12 06:21:00,045 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 06:21:00,045 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-12 06:21:00,046 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-12 06:21:00,046 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 06:21:00,046 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 06:21:00,108 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 06:21:00,110 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 06:21:00,439 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 06:21:00,446 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 06:21:00,447 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-12 06:21:00,449 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:21:00 BoogieIcfgContainer [2022-07-12 06:21:00,449 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 06:21:00,450 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 06:21:00,451 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 06:21:00,454 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 06:21:00,454 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 06:20:59" (1/3) ... [2022-07-12 06:21:00,455 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1b959acb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:21:00, skipping insertion in model container [2022-07-12 06:21:00,455 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:59" (2/3) ... [2022-07-12 06:21:00,456 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1b959acb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:21:00, skipping insertion in model container [2022-07-12 06:21:00,456 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:21:00" (3/3) ... [2022-07-12 06:21:00,457 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product48.cil.c [2022-07-12 06:21:00,471 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 06:21:00,471 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 06:21:00,526 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 06:21:00,531 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@410321e5, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@2cd9f3e2 [2022-07-12 06:21:00,531 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 06:21:00,535 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 79 states have (on average 1.3544303797468353) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-12 06:21:00,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-12 06:21:00,550 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:00,551 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:00,552 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:00,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:00,558 INFO L85 PathProgramCache]: Analyzing trace with hash -484637396, now seen corresponding path program 1 times [2022-07-12 06:21:00,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:00,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [31670539] [2022-07-12 06:21:00,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:00,570 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:00,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-12 06:21:00,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:21:00,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,799 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:21:00,800 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:00,800 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [31670539] [2022-07-12 06:21:00,801 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [31670539] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:21:00,801 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:21:00,801 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-12 06:21:00,802 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1188394008] [2022-07-12 06:21:00,803 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:21:00,806 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-12 06:21:00,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:00,831 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-12 06:21:00,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:21:00,836 INFO L87 Difference]: Start difference. First operand has 106 states, 79 states have (on average 1.3544303797468353) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:21:00,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:00,900 INFO L93 Difference]: Finished difference Result 203 states and 272 transitions. [2022-07-12 06:21:00,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-12 06:21:00,903 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-07-12 06:21:00,903 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:00,912 INFO L225 Difference]: With dead ends: 203 [2022-07-12 06:21:00,912 INFO L226 Difference]: Without dead ends: 97 [2022-07-12 06:21:00,917 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:21:00,922 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:00,923 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:21:00,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-07-12 06:21:00,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2022-07-12 06:21:00,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 72 states have (on average 1.2916666666666667) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-12 06:21:00,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 124 transitions. [2022-07-12 06:21:00,984 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 124 transitions. Word has length 32 [2022-07-12 06:21:00,984 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:00,985 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 124 transitions. [2022-07-12 06:21:00,985 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:21:00,986 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 124 transitions. [2022-07-12 06:21:00,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-07-12 06:21:00,994 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:00,995 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:00,995 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 06:21:00,996 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:00,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:00,997 INFO L85 PathProgramCache]: Analyzing trace with hash -1885221865, now seen corresponding path program 1 times [2022-07-12 06:21:00,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:01,013 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [563560597] [2022-07-12 06:21:01,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:01,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:01,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 06:21:01,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 06:21:01,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,156 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:21:01,159 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:01,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [563560597] [2022-07-12 06:21:01,160 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [563560597] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:21:01,161 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:21:01,161 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 06:21:01,161 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1219966399] [2022-07-12 06:21:01,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:21:01,163 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:21:01,164 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:01,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:21:01,165 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:21:01,165 INFO L87 Difference]: Start difference. First operand 97 states and 124 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:21:01,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:01,194 INFO L93 Difference]: Finished difference Result 154 states and 196 transitions. [2022-07-12 06:21:01,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:21:01,195 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-07-12 06:21:01,196 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:01,201 INFO L225 Difference]: With dead ends: 154 [2022-07-12 06:21:01,202 INFO L226 Difference]: Without dead ends: 88 [2022-07-12 06:21:01,204 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:21:01,206 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 17 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:01,208 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 200 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:21:01,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2022-07-12 06:21:01,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2022-07-12 06:21:01,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-12 06:21:01,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 112 transitions. [2022-07-12 06:21:01,228 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 112 transitions. Word has length 33 [2022-07-12 06:21:01,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:01,229 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 112 transitions. [2022-07-12 06:21:01,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:21:01,230 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 112 transitions. [2022-07-12 06:21:01,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-12 06:21:01,233 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:01,233 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:01,234 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-12 06:21:01,234 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:01,235 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:01,235 INFO L85 PathProgramCache]: Analyzing trace with hash 2024045384, now seen corresponding path program 1 times [2022-07-12 06:21:01,235 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:01,235 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492366040] [2022-07-12 06:21:01,236 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:01,236 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:01,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:21:01,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-12 06:21:01,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,327 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:21:01,328 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:01,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492366040] [2022-07-12 06:21:01,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492366040] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:21:01,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:21:01,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:21:01,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1892678607] [2022-07-12 06:21:01,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:21:01,329 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:21:01,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:01,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:21:01,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:21:01,331 INFO L87 Difference]: Start difference. First operand 88 states and 112 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-12 06:21:01,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:01,437 INFO L93 Difference]: Finished difference Result 215 states and 278 transitions. [2022-07-12 06:21:01,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-12 06:21:01,438 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-07-12 06:21:01,439 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:01,442 INFO L225 Difference]: With dead ends: 215 [2022-07-12 06:21:01,442 INFO L226 Difference]: Without dead ends: 135 [2022-07-12 06:21:01,444 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:21:01,449 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 173 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:01,450 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 380 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:21:01,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135 states. [2022-07-12 06:21:01,478 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135 to 132. [2022-07-12 06:21:01,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 132 states, 99 states have (on average 1.3232323232323233) internal successors, (131), 110 states have internal predecessors, (131), 19 states have call successors, (19), 13 states have call predecessors, (19), 13 states have return successors, (20), 15 states have call predecessors, (20), 19 states have call successors, (20) [2022-07-12 06:21:01,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 132 states to 132 states and 170 transitions. [2022-07-12 06:21:01,483 INFO L78 Accepts]: Start accepts. Automaton has 132 states and 170 transitions. Word has length 38 [2022-07-12 06:21:01,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:01,484 INFO L495 AbstractCegarLoop]: Abstraction has 132 states and 170 transitions. [2022-07-12 06:21:01,484 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-12 06:21:01,485 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 170 transitions. [2022-07-12 06:21:01,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-07-12 06:21:01,488 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:01,488 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:01,489 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-12 06:21:01,490 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:01,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:01,490 INFO L85 PathProgramCache]: Analyzing trace with hash 1147378310, now seen corresponding path program 1 times [2022-07-12 06:21:01,490 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:01,491 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1781428394] [2022-07-12 06:21:01,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:01,491 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:01,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 06:21:01,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-07-12 06:21:01,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,605 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-12 06:21:01,606 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:01,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1781428394] [2022-07-12 06:21:01,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1781428394] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:21:01,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:21:01,607 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:21:01,607 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [993607907] [2022-07-12 06:21:01,607 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:21:01,608 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:21:01,608 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:01,609 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:21:01,609 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:21:01,610 INFO L87 Difference]: Start difference. First operand 132 states and 170 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:21:01,739 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:01,739 INFO L93 Difference]: Finished difference Result 309 states and 407 transitions. [2022-07-12 06:21:01,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-12 06:21:01,740 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-07-12 06:21:01,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:01,743 INFO L225 Difference]: With dead ends: 309 [2022-07-12 06:21:01,743 INFO L226 Difference]: Without dead ends: 185 [2022-07-12 06:21:01,745 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-12 06:21:01,756 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 59 mSDsluCounter, 390 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 510 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:01,757 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 510 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:21:01,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2022-07-12 06:21:01,774 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 175. [2022-07-12 06:21:01,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 132 states have (on average 1.2575757575757576) internal successors, (166), 143 states have internal predecessors, (166), 23 states have call successors, (23), 19 states have call predecessors, (23), 19 states have return successors, (29), 22 states have call predecessors, (29), 23 states have call successors, (29) [2022-07-12 06:21:01,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 218 transitions. [2022-07-12 06:21:01,782 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 218 transitions. Word has length 41 [2022-07-12 06:21:01,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:01,782 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 218 transitions. [2022-07-12 06:21:01,783 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:21:01,783 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 218 transitions. [2022-07-12 06:21:01,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-12 06:21:01,785 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:01,785 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:01,785 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 06:21:01,786 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:01,786 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:01,786 INFO L85 PathProgramCache]: Analyzing trace with hash 1262122641, now seen corresponding path program 1 times [2022-07-12 06:21:01,787 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:01,791 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1175716497] [2022-07-12 06:21:01,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:01,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:01,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 06:21:01,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-12 06:21:01,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:01,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-12 06:21:01,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,911 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:21:01,912 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:01,912 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1175716497] [2022-07-12 06:21:01,912 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1175716497] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:21:01,912 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:21:01,913 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-12 06:21:01,913 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [83515819] [2022-07-12 06:21:01,913 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:21:01,913 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-12 06:21:01,914 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:01,914 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-12 06:21:01,914 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-12 06:21:01,915 INFO L87 Difference]: Start difference. First operand 175 states and 218 transitions. Second operand has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:21:02,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:02,021 INFO L93 Difference]: Finished difference Result 369 states and 460 transitions. [2022-07-12 06:21:02,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:21:02,022 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 63 [2022-07-12 06:21:02,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:02,038 INFO L225 Difference]: With dead ends: 369 [2022-07-12 06:21:02,038 INFO L226 Difference]: Without dead ends: 202 [2022-07-12 06:21:02,039 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:21:02,040 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 96 mSDsluCounter, 139 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 274 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:02,040 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 274 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:21:02,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2022-07-12 06:21:02,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 198. [2022-07-12 06:21:02,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 150 states have (on average 1.2466666666666666) internal successors, (187), 161 states have internal predecessors, (187), 25 states have call successors, (25), 19 states have call predecessors, (25), 22 states have return successors, (32), 26 states have call predecessors, (32), 25 states have call successors, (32) [2022-07-12 06:21:02,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 244 transitions. [2022-07-12 06:21:02,055 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 244 transitions. Word has length 63 [2022-07-12 06:21:02,056 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:02,056 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 244 transitions. [2022-07-12 06:21:02,056 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:21:02,056 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 244 transitions. [2022-07-12 06:21:02,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-12 06:21:02,057 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:02,057 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:02,058 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-12 06:21:02,058 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:02,058 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:02,059 INFO L85 PathProgramCache]: Analyzing trace with hash 1864989139, now seen corresponding path program 1 times [2022-07-12 06:21:02,059 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:02,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [483880218] [2022-07-12 06:21:02,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:02,059 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:02,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:21:02,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:21:02,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:02,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 06:21:02,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,126 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:21:02,126 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:02,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [483880218] [2022-07-12 06:21:02,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [483880218] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:21:02,127 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:21:02,127 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:21:02,127 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1223758532] [2022-07-12 06:21:02,127 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:21:02,128 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:21:02,128 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:02,128 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:21:02,129 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:21:02,129 INFO L87 Difference]: Start difference. First operand 198 states and 244 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:21:02,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:02,292 INFO L93 Difference]: Finished difference Result 398 states and 501 transitions. [2022-07-12 06:21:02,293 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:21:02,293 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-07-12 06:21:02,294 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:02,296 INFO L225 Difference]: With dead ends: 398 [2022-07-12 06:21:02,297 INFO L226 Difference]: Without dead ends: 208 [2022-07-12 06:21:02,298 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:21:02,299 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 69 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 403 SdHoareTripleChecker+Invalid, 157 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:02,299 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 403 Invalid, 157 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:21:02,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 208 states. [2022-07-12 06:21:02,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 208 to 201. [2022-07-12 06:21:02,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 201 states, 153 states have (on average 1.2418300653594772) internal successors, (190), 164 states have internal predecessors, (190), 25 states have call successors, (25), 19 states have call predecessors, (25), 22 states have return successors, (32), 26 states have call predecessors, (32), 25 states have call successors, (32) [2022-07-12 06:21:02,314 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 201 states to 201 states and 247 transitions. [2022-07-12 06:21:02,315 INFO L78 Accepts]: Start accepts. Automaton has 201 states and 247 transitions. Word has length 60 [2022-07-12 06:21:02,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:02,315 INFO L495 AbstractCegarLoop]: Abstraction has 201 states and 247 transitions. [2022-07-12 06:21:02,315 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:21:02,315 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 247 transitions. [2022-07-12 06:21:02,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-12 06:21:02,316 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:02,316 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:02,316 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-12 06:21:02,317 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:02,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:02,317 INFO L85 PathProgramCache]: Analyzing trace with hash -506750123, now seen corresponding path program 1 times [2022-07-12 06:21:02,317 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:02,317 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [268674066] [2022-07-12 06:21:02,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:02,318 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:02,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:21:02,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:21:02,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:02,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 06:21:02,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,431 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:21:02,431 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:02,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [268674066] [2022-07-12 06:21:02,431 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [268674066] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:21:02,436 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:21:02,436 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:21:02,436 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [74567264] [2022-07-12 06:21:02,436 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:21:02,437 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:21:02,437 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:02,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:21:02,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:21:02,440 INFO L87 Difference]: Start difference. First operand 201 states and 247 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:21:02,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:02,606 INFO L93 Difference]: Finished difference Result 404 states and 506 transitions. [2022-07-12 06:21:02,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:21:02,607 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-07-12 06:21:02,607 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:02,608 INFO L225 Difference]: With dead ends: 404 [2022-07-12 06:21:02,608 INFO L226 Difference]: Without dead ends: 211 [2022-07-12 06:21:02,609 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:21:02,610 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 116 mSDsluCounter, 335 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 435 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:02,610 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 435 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:21:02,611 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2022-07-12 06:21:02,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 203. [2022-07-12 06:21:02,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 203 states, 155 states have (on average 1.238709677419355) internal successors, (192), 166 states have internal predecessors, (192), 25 states have call successors, (25), 19 states have call predecessors, (25), 22 states have return successors, (32), 26 states have call predecessors, (32), 25 states have call successors, (32) [2022-07-12 06:21:02,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 249 transitions. [2022-07-12 06:21:02,621 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 249 transitions. Word has length 60 [2022-07-12 06:21:02,621 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:02,622 INFO L495 AbstractCegarLoop]: Abstraction has 203 states and 249 transitions. [2022-07-12 06:21:02,622 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:21:02,622 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 249 transitions. [2022-07-12 06:21:02,623 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-12 06:21:02,623 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:02,623 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:02,623 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-12 06:21:02,623 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:02,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:02,624 INFO L85 PathProgramCache]: Analyzing trace with hash 879453271, now seen corresponding path program 1 times [2022-07-12 06:21:02,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:02,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1217804262] [2022-07-12 06:21:02,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:02,625 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:02,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:21:02,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:21:02,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:02,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 06:21:02,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:02,681 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:21:02,681 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:02,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1217804262] [2022-07-12 06:21:02,682 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1217804262] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:21:02,682 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:21:02,682 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:21:02,682 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1788660816] [2022-07-12 06:21:02,682 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:21:02,683 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:21:02,683 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:02,683 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:21:02,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:21:02,684 INFO L87 Difference]: Start difference. First operand 203 states and 249 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:21:02,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:02,874 INFO L93 Difference]: Finished difference Result 611 states and 776 transitions. [2022-07-12 06:21:02,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:21:02,875 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2022-07-12 06:21:02,875 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:02,878 INFO L225 Difference]: With dead ends: 611 [2022-07-12 06:21:02,878 INFO L226 Difference]: Without dead ends: 416 [2022-07-12 06:21:02,879 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:21:02,880 INFO L413 NwaCegarLoop]: 157 mSDtfsCounter, 234 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 162 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 234 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:02,880 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 347 Invalid, 234 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:21:02,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 416 states. [2022-07-12 06:21:02,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 416 to 414. [2022-07-12 06:21:02,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 315 states have (on average 1.2158730158730158) internal successors, (383), 334 states have internal predecessors, (383), 54 states have call successors, (54), 44 states have call predecessors, (54), 44 states have return successors, (74), 53 states have call predecessors, (74), 54 states have call successors, (74) [2022-07-12 06:21:02,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 511 transitions. [2022-07-12 06:21:02,903 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 511 transitions. Word has length 60 [2022-07-12 06:21:02,904 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:02,904 INFO L495 AbstractCegarLoop]: Abstraction has 414 states and 511 transitions. [2022-07-12 06:21:02,904 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:21:02,904 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 511 transitions. [2022-07-12 06:21:02,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-07-12 06:21:02,905 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:02,906 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:02,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-12 06:21:02,906 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:02,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:02,907 INFO L85 PathProgramCache]: Analyzing trace with hash -269338319, now seen corresponding path program 1 times [2022-07-12 06:21:02,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:02,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1497537791] [2022-07-12 06:21:02,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:02,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:02,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:03,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-12 06:21:03,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-07-12 06:21:03,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:03,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-07-12 06:21:03,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,047 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:21:03,048 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:03,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1497537791] [2022-07-12 06:21:03,048 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1497537791] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:21:03,048 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:21:03,048 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-12 06:21:03,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [13004680] [2022-07-12 06:21:03,049 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:21:03,050 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-12 06:21:03,050 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:03,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-12 06:21:03,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:21:03,052 INFO L87 Difference]: Start difference. First operand 414 states and 511 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-12 06:21:03,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:03,884 INFO L93 Difference]: Finished difference Result 1086 states and 1392 transitions. [2022-07-12 06:21:03,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-07-12 06:21:03,884 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2022-07-12 06:21:03,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:03,888 INFO L225 Difference]: With dead ends: 1086 [2022-07-12 06:21:03,889 INFO L226 Difference]: Without dead ends: 768 [2022-07-12 06:21:03,890 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2022-07-12 06:21:03,891 INFO L413 NwaCegarLoop]: 157 mSDtfsCounter, 746 mSDsluCounter, 446 mSDsCounter, 0 mSdLazyCounter, 577 mSolverCounterSat, 285 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 754 SdHoareTripleChecker+Valid, 603 SdHoareTripleChecker+Invalid, 862 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 285 IncrementalHoareTripleChecker+Valid, 577 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:03,892 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [754 Valid, 603 Invalid, 862 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [285 Valid, 577 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-12 06:21:03,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 768 states. [2022-07-12 06:21:03,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 768 to 610. [2022-07-12 06:21:03,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 610 states, 463 states have (on average 1.205183585313175) internal successors, (558), 494 states have internal predecessors, (558), 79 states have call successors, (79), 60 states have call predecessors, (79), 67 states have return successors, (112), 77 states have call predecessors, (112), 79 states have call successors, (112) [2022-07-12 06:21:03,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 610 states to 610 states and 749 transitions. [2022-07-12 06:21:03,928 INFO L78 Accepts]: Start accepts. Automaton has 610 states and 749 transitions. Word has length 64 [2022-07-12 06:21:03,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:03,929 INFO L495 AbstractCegarLoop]: Abstraction has 610 states and 749 transitions. [2022-07-12 06:21:03,929 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-12 06:21:03,929 INFO L276 IsEmpty]: Start isEmpty. Operand 610 states and 749 transitions. [2022-07-12 06:21:03,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-07-12 06:21:03,931 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:03,931 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:03,931 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-12 06:21:03,932 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:03,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:03,932 INFO L85 PathProgramCache]: Analyzing trace with hash 1748536662, now seen corresponding path program 1 times [2022-07-12 06:21:03,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:03,933 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2059415614] [2022-07-12 06:21:03,933 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:03,933 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:03,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:03,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:21:04,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:04,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-12 06:21:04,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:04,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-12 06:21:04,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-07-12 06:21:04,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-12 06:21:04,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:21:04,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-07-12 06:21:04,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,055 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-12 06:21:04,055 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:04,055 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2059415614] [2022-07-12 06:21:04,055 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2059415614] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:21:04,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [429716584] [2022-07-12 06:21:04,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:04,056 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:21:04,056 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:21:04,059 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:21:04,084 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-12 06:21:04,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:04,174 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-12 06:21:04,181 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:21:04,369 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:21:04,369 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 06:21:04,548 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-12 06:21:04,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [429716584] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 06:21:04,549 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 06:21:04,549 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-07-12 06:21:04,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [796648844] [2022-07-12 06:21:04,549 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 06:21:04,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-07-12 06:21:04,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:04,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-07-12 06:21:04,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-07-12 06:21:04,551 INFO L87 Difference]: Start difference. First operand 610 states and 749 transitions. Second operand has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-07-12 06:21:05,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:05,672 INFO L93 Difference]: Finished difference Result 1340 states and 1699 transitions. [2022-07-12 06:21:05,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-07-12 06:21:05,673 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) Word has length 108 [2022-07-12 06:21:05,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:05,675 INFO L225 Difference]: With dead ends: 1340 [2022-07-12 06:21:05,675 INFO L226 Difference]: Without dead ends: 0 [2022-07-12 06:21:05,679 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 285 GetRequests, 244 SyntacticMatches, 1 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 392 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=301, Invalid=1421, Unknown=0, NotChecked=0, Total=1722 [2022-07-12 06:21:05,680 INFO L413 NwaCegarLoop]: 234 mSDtfsCounter, 482 mSDsluCounter, 1360 mSDsCounter, 0 mSdLazyCounter, 1337 mSolverCounterSat, 238 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 483 SdHoareTripleChecker+Valid, 1594 SdHoareTripleChecker+Invalid, 1575 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 238 IncrementalHoareTripleChecker+Valid, 1337 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:05,681 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [483 Valid, 1594 Invalid, 1575 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [238 Valid, 1337 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-07-12 06:21:05,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-12 06:21:05,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-12 06:21:05,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:21:05,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-12 06:21:05,682 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 108 [2022-07-12 06:21:05,682 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:05,683 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-12 06:21:05,683 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-07-12 06:21:05,683 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-12 06:21:05,683 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-12 06:21:05,685 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 06:21:05,716 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-12 06:21:05,911 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-12 06:21:05,913 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-12 06:21:09,725 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 624 631) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-12 06:21:09,726 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2022-07-12 06:21:09,726 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 624 631) no Hoare annotation was computed. [2022-07-12 06:21:09,726 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 540 546) no Hoare annotation was computed. [2022-07-12 06:21:09,726 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 540 546) the Hoare annotation is: true [2022-07-12 06:21:09,726 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 758 769) the Hoare annotation is: true [2022-07-12 06:21:09,726 INFO L899 garLoopResultBuilder]: For program point L762-1(lines 758 769) no Hoare annotation was computed. [2022-07-12 06:21:09,726 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 758 769) no Hoare annotation was computed. [2022-07-12 06:21:09,726 INFO L902 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: true [2022-07-12 06:21:09,726 INFO L899 garLoopResultBuilder]: For program point L833-1(line 833) no Hoare annotation was computed. [2022-07-12 06:21:09,727 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 827 856) no Hoare annotation was computed. [2022-07-12 06:21:09,727 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 827 856) the Hoare annotation is: true [2022-07-12 06:21:09,727 INFO L902 garLoopResultBuilder]: At program point L852(lines 827 856) the Hoare annotation is: true [2022-07-12 06:21:09,727 INFO L899 garLoopResultBuilder]: For program point L848(line 848) no Hoare annotation was computed. [2022-07-12 06:21:09,727 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2022-07-12 06:21:09,727 INFO L902 garLoopResultBuilder]: At program point L841-1(lines 841 845) the Hoare annotation is: true [2022-07-12 06:21:09,727 INFO L899 garLoopResultBuilder]: For program point L838(line 838) no Hoare annotation was computed. [2022-07-12 06:21:09,728 INFO L902 garLoopResultBuilder]: At program point L837-2(lines 837 851) the Hoare annotation is: true [2022-07-12 06:21:09,728 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2) (let ((.cse5 (<= ~waterLevel~0 2))) (or .cse3 (and .cse4 .cse5 .cse6) .cse7 .cse1 (and .cse8 .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse3 (and .cse8 .cse9 .cse6) .cse7 .cse1 .cse2 (and .cse4 .cse9 .cse6))) (or .cse0 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2022-07-12 06:21:09,728 INFO L899 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2022-07-12 06:21:09,728 INFO L895 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 .cse2 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2022-07-12 06:21:09,728 INFO L895 garLoopResultBuilder]: At program point L593-1(lines 574 598) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 (not .cse2)) (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse3 .cse4) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse4) .cse1)) (let ((.cse6 (<= ~waterLevel~0 2))) (or .cse5 (and .cse3 .cse6 .cse7) .cse2 .cse1 (and .cse8 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse5 (and .cse8 .cse9 .cse7) .cse2 .cse1 (not (<= 2 |old(~waterLevel~0)|)) (and .cse3 .cse9 .cse7))))) [2022-07-12 06:21:09,729 INFO L899 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2022-07-12 06:21:09,729 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 513 539) no Hoare annotation was computed. [2022-07-12 06:21:09,729 INFO L899 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2022-07-12 06:21:09,729 INFO L899 garLoopResultBuilder]: For program point L738(lines 738 742) no Hoare annotation was computed. [2022-07-12 06:21:09,729 INFO L895 garLoopResultBuilder]: At program point L738-2(lines 734 745) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-07-12 06:21:09,729 INFO L895 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-07-12 06:21:09,730 INFO L899 garLoopResultBuilder]: For program point L941-1(line 941) no Hoare annotation was computed. [2022-07-12 06:21:09,730 INFO L899 garLoopResultBuilder]: For program point L520(lines 520 526) no Hoare annotation was computed. [2022-07-12 06:21:09,731 INFO L899 garLoopResultBuilder]: For program point L520-2(lines 516 538) no Hoare annotation was computed. [2022-07-12 06:21:09,731 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 590) no Hoare annotation was computed. [2022-07-12 06:21:09,731 INFO L895 garLoopResultBuilder]: At program point L421(lines 416 423) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 .cse2 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse2 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-07-12 06:21:09,731 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 595) no Hoare annotation was computed. [2022-07-12 06:21:09,731 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 968) no Hoare annotation was computed. [2022-07-12 06:21:09,731 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 971) no Hoare annotation was computed. [2022-07-12 06:21:09,732 INFO L895 garLoopResultBuilder]: At program point L954-1(lines 946 974) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (= ~pumpRunning~0 0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse0 (and (<= |timeShift_getWaterLevel_#res#1| 2) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse2 .cse4) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse5) (and .cse6 .cse5) .cse2)) (let ((.cse8 (<= ~waterLevel~0 2))) (or .cse7 (and .cse1 .cse8 .cse9) .cse3 .cse2 (and .cse6 .cse8 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse10 (= ~waterLevel~0 1))) (or .cse7 (and .cse6 .cse10 .cse9) .cse3 .cse2 .cse4 (and .cse1 .cse10 .cse9))))) [2022-07-12 06:21:09,732 INFO L899 garLoopResultBuilder]: For program point L959(lines 959 965) no Hoare annotation was computed. [2022-07-12 06:21:09,732 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 513 539) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-07-12 06:21:09,732 INFO L895 garLoopResultBuilder]: At program point L943(lines 936 945) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse4) .cse3)))) [2022-07-12 06:21:09,732 INFO L895 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-07-12 06:21:09,732 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 513 539) no Hoare annotation was computed. [2022-07-12 06:21:09,733 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2022-07-12 06:21:09,733 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-07-12 06:21:09,733 INFO L895 garLoopResultBuilder]: At program point L807(lines 802 810) the Hoare annotation is: (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse1 .cse2) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2 (not .cse3)) .cse4)) (let ((.cse6 (<= ~waterLevel~0 2))) (or .cse5 (and .cse1 .cse6 .cse7) .cse3 .cse4 (and .cse8 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse5 (and .cse8 .cse9 .cse7) .cse3 .cse4 .cse10 (and .cse1 .cse9 .cse7))) (or .cse0 .cse4 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse10))) [2022-07-12 06:21:09,733 INFO L895 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-07-12 06:21:09,733 INFO L899 garLoopResultBuilder]: For program point L580-1(line 580) no Hoare annotation was computed. [2022-07-12 06:21:09,734 INFO L895 garLoopResultBuilder]: At program point L1006(lines 1001 1009) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:09,734 INFO L902 garLoopResultBuilder]: At program point L494(lines 431 498) the Hoare annotation is: true [2022-07-12 06:21:09,734 INFO L899 garLoopResultBuilder]: For program point L461(lines 461 467) no Hoare annotation was computed. [2022-07-12 06:21:09,734 INFO L899 garLoopResultBuilder]: For program point L461-1(lines 461 467) no Hoare annotation was computed. [2022-07-12 06:21:09,735 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:21:09,735 INFO L895 garLoopResultBuilder]: At program point L998(lines 994 1000) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:09,735 INFO L895 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:21:09,735 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-12 06:21:09,735 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-12 06:21:09,735 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-12 06:21:09,738 INFO L895 garLoopResultBuilder]: At program point L491(lines 440 492) the Hoare annotation is: false [2022-07-12 06:21:09,739 INFO L895 garLoopResultBuilder]: At program point L933(lines 928 935) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:09,739 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-12 06:21:09,739 INFO L895 garLoopResultBuilder]: At program point L991(lines 987 993) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:09,739 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2022-07-12 06:21:09,739 INFO L895 garLoopResultBuilder]: At program point L479-2(lines 471 486) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:21:09,739 INFO L899 garLoopResultBuilder]: For program point L442(lines 441 490) no Hoare annotation was computed. [2022-07-12 06:21:09,740 INFO L899 garLoopResultBuilder]: For program point L471(lines 471 486) no Hoare annotation was computed. [2022-07-12 06:21:09,740 INFO L895 garLoopResultBuilder]: At program point L727(lines 722 729) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:21:09,740 INFO L899 garLoopResultBuilder]: For program point L913(lines 913 920) no Hoare annotation was computed. [2022-07-12 06:21:09,740 INFO L895 garLoopResultBuilder]: At program point L463(line 463) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:21:09,740 INFO L895 garLoopResultBuilder]: At program point L719(lines 707 721) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) [2022-07-12 06:21:09,740 INFO L899 garLoopResultBuilder]: For program point L913-2(lines 913 920) no Hoare annotation was computed. [2022-07-12 06:21:09,740 INFO L895 garLoopResultBuilder]: At program point L488(lines 441 490) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:21:09,741 INFO L899 garLoopResultBuilder]: For program point L711(lines 711 717) no Hoare annotation was computed. [2022-07-12 06:21:09,741 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 711 717) no Hoare annotation was computed. [2022-07-12 06:21:09,741 INFO L899 garLoopResultBuilder]: For program point L451(lines 451 457) no Hoare annotation was computed. [2022-07-12 06:21:09,741 INFO L899 garLoopResultBuilder]: For program point L451-1(lines 451 457) no Hoare annotation was computed. [2022-07-12 06:21:09,741 INFO L902 garLoopResultBuilder]: At program point L897(lines 889 899) the Hoare annotation is: true [2022-07-12 06:21:09,742 INFO L899 garLoopResultBuilder]: For program point L443(lines 443 447) no Hoare annotation was computed. [2022-07-12 06:21:09,742 INFO L902 garLoopResultBuilder]: At program point L922(lines 903 925) the Hoare annotation is: true [2022-07-12 06:21:09,742 INFO L895 garLoopResultBuilder]: At program point L885(lines 881 887) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:09,746 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 746 757) no Hoare annotation was computed. [2022-07-12 06:21:09,746 INFO L899 garLoopResultBuilder]: For program point L750-1(lines 746 757) no Hoare annotation was computed. [2022-07-12 06:21:09,746 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 746 757) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse1 .cse3))) [2022-07-12 06:21:09,746 INFO L895 garLoopResultBuilder]: At program point L820(lines 811 824) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse2) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2022-07-12 06:21:09,746 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)) .cse0 .cse1))) [2022-07-12 06:21:09,746 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 564) no Hoare annotation was computed. [2022-07-12 06:21:09,746 INFO L899 garLoopResultBuilder]: For program point L552(lines 552 569) no Hoare annotation was computed. [2022-07-12 06:21:09,746 INFO L899 garLoopResultBuilder]: For program point L614(lines 614 620) no Hoare annotation was computed. [2022-07-12 06:21:09,747 INFO L895 garLoopResultBuilder]: At program point L612(line 612) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) .cse1))) [2022-07-12 06:21:09,747 INFO L895 garLoopResultBuilder]: At program point L614-2(lines 607 623) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) .cse0) .cse1 (and (= ~pumpRunning~0 0) .cse0) .cse2)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-12 06:21:09,747 INFO L899 garLoopResultBuilder]: For program point L612-1(line 612) no Hoare annotation was computed. [2022-07-12 06:21:09,747 INFO L895 garLoopResultBuilder]: At program point L703(lines 688 706) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse2 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2022-07-12 06:21:09,747 INFO L895 garLoopResultBuilder]: At program point L604(lines 599 606) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2022-07-12 06:21:09,747 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2022-07-12 06:21:09,747 INFO L899 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2022-07-12 06:21:09,747 INFO L895 garLoopResultBuilder]: At program point L567(line 567) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-12 06:21:09,747 INFO L899 garLoopResultBuilder]: For program point L567-1(lines 548 572) no Hoare annotation was computed. [2022-07-12 06:21:09,747 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 548 572) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2022-07-12 06:21:09,747 INFO L899 garLoopResultBuilder]: For program point L815(lines 815 821) no Hoare annotation was computed. [2022-07-12 06:21:09,747 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 548 572) no Hoare annotation was computed. [2022-07-12 06:21:09,747 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 643 651) no Hoare annotation was computed. [2022-07-12 06:21:09,748 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 643 651) the Hoare annotation is: true [2022-07-12 06:21:09,748 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 643 651) no Hoare annotation was computed. [2022-07-12 06:21:09,748 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 632 642) the Hoare annotation is: true [2022-07-12 06:21:09,748 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 632 642) no Hoare annotation was computed. [2022-07-12 06:21:09,748 INFO L902 garLoopResultBuilder]: At program point L775(lines 770 778) the Hoare annotation is: true [2022-07-12 06:21:09,748 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 632 642) no Hoare annotation was computed. [2022-07-12 06:21:09,750 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:09,752 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 06:21:09,778 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 06:21:09 BoogieIcfgContainer [2022-07-12 06:21:09,778 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 06:21:09,779 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 06:21:09,779 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 06:21:09,779 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 06:21:09,779 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:21:00" (3/4) ... [2022-07-12 06:21:09,782 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-12 06:21:09,788 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-12 06:21:09,788 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-12 06:21:09,788 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-12 06:21:09,788 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-12 06:21:09,788 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-12 06:21:09,789 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-12 06:21:09,789 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:21:09,789 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-07-12 06:21:09,789 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-12 06:21:09,801 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-07-12 06:21:09,802 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-12 06:21:09,802 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-12 06:21:09,803 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-12 06:21:09,803 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-12 06:21:09,804 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:21:09,804 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:21:09,828 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:21:09,828 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:21:09,829 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:21:09,829 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2)) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2022-07-12 06:21:09,831 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2022-07-12 06:21:09,831 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-07-12 06:21:09,831 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2022-07-12 06:21:09,832 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-07-12 06:21:09,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-07-12 06:21:09,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-07-12 06:21:09,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive [2022-07-12 06:21:09,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) [2022-07-12 06:21:09,834 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (1 <= \result && pumpRunning == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2022-07-12 06:21:09,834 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-07-12 06:21:09,834 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) [2022-07-12 06:21:09,835 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || ((tmp___0 == 0 && pumpRunning == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2022-07-12 06:21:09,876 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-12 06:21:09,877 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 06:21:09,878 INFO L158 Benchmark]: Toolchain (without parser) took 10573.77ms. Allocated memory was 81.8MB in the beginning and 144.7MB in the end (delta: 62.9MB). Free memory was 50.7MB in the beginning and 109.1MB in the end (delta: -58.4MB). Peak memory consumption was 4.8MB. Max. memory is 16.1GB. [2022-07-12 06:21:09,878 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 81.8MB. Free memory was 35.8MB in the beginning and 35.8MB in the end (delta: 49.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 06:21:09,878 INFO L158 Benchmark]: CACSL2BoogieTranslator took 535.93ms. Allocated memory was 81.8MB in the beginning and 98.6MB in the end (delta: 16.8MB). Free memory was 50.4MB in the beginning and 65.5MB in the end (delta: -15.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-12 06:21:09,878 INFO L158 Benchmark]: Boogie Procedure Inliner took 52.90ms. Allocated memory is still 98.6MB. Free memory was 65.5MB in the beginning and 63.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:21:09,879 INFO L158 Benchmark]: Boogie Preprocessor took 50.30ms. Allocated memory is still 98.6MB. Free memory was 63.1MB in the beginning and 61.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:21:09,879 INFO L158 Benchmark]: RCFGBuilder took 501.20ms. Allocated memory is still 98.6MB. Free memory was 61.4MB in the beginning and 71.4MB in the end (delta: -10.0MB). Peak memory consumption was 17.2MB. Max. memory is 16.1GB. [2022-07-12 06:21:09,880 INFO L158 Benchmark]: TraceAbstraction took 9327.65ms. Allocated memory was 98.6MB in the beginning and 144.7MB in the end (delta: 46.1MB). Free memory was 70.4MB in the beginning and 115.4MB in the end (delta: -44.9MB). Peak memory consumption was 84.8MB. Max. memory is 16.1GB. [2022-07-12 06:21:09,880 INFO L158 Benchmark]: Witness Printer took 98.31ms. Allocated memory is still 144.7MB. Free memory was 115.4MB in the beginning and 109.1MB in the end (delta: 6.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-12 06:21:09,881 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 81.8MB. Free memory was 35.8MB in the beginning and 35.8MB in the end (delta: 49.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 535.93ms. Allocated memory was 81.8MB in the beginning and 98.6MB in the end (delta: 16.8MB). Free memory was 50.4MB in the beginning and 65.5MB in the end (delta: -15.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 52.90ms. Allocated memory is still 98.6MB. Free memory was 65.5MB in the beginning and 63.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 50.30ms. Allocated memory is still 98.6MB. Free memory was 63.1MB in the beginning and 61.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 501.20ms. Allocated memory is still 98.6MB. Free memory was 61.4MB in the beginning and 71.4MB in the end (delta: -10.0MB). Peak memory consumption was 17.2MB. Max. memory is 16.1GB. * TraceAbstraction took 9327.65ms. Allocated memory was 98.6MB in the beginning and 144.7MB in the end (delta: 46.1MB). Free memory was 70.4MB in the beginning and 115.4MB in the end (delta: -44.9MB). Peak memory consumption was 84.8MB. Max. memory is 16.1GB. * Witness Printer took 98.31ms. Allocated memory is still 144.7MB. Free memory was 115.4MB in the beginning and 109.1MB in the end (delta: 6.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.2s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2034 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1992 mSDsluCounter, 4879 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3505 mSDsCounter, 703 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2528 IncrementalHoareTripleChecker+Invalid, 3231 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 703 mSolverCounterUnsat, 1374 mSDtfsCounter, 2528 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 438 GetRequests, 326 SyntacticMatches, 2 SemanticMatches, 110 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 685 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=610occurred in iteration=9, InterpolantAutomatonStates: 106, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 192 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1420 PreInvPairs, 1737 NumberOfFragments, 1909 HoareAnnotationTreeSize, 1420 FomulaSimplifications, 2147 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 49 FomulaSimplificationsInter, 11365 FormulaSimplificationTreeSizeReductionInter, 3.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 667 NumberOfCodeBlocks, 667 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 763 ConstructedInterpolants, 0 QuantifiedInterpolants, 1457 SizeOfPredicates, 3 NumberOfNonLiveVariables, 501 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 115/141 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 994]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 889]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 607]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 987]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || ((tmp___0 == 0 && pumpRunning == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 903]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 811]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (1 <= \result && pumpRunning == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2)) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-07-12 06:21:09,949 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE