./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 791161d1 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 --- Real Ultimate output --- This is Ultimate 0.2.2-?-791161d [2022-07-22 17:37:52,251 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 17:37:52,254 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 17:37:52,297 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 17:37:52,297 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 17:37:52,298 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 17:37:52,300 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 17:37:52,302 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 17:37:52,304 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 17:37:52,307 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 17:37:52,308 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 17:37:52,310 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 17:37:52,310 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 17:37:52,312 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 17:37:52,313 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 17:37:52,316 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 17:37:52,317 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 17:37:52,318 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 17:37:52,319 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 17:37:52,324 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 17:37:52,326 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 17:37:52,327 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 17:37:52,328 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 17:37:52,329 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 17:37:52,330 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 17:37:52,336 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 17:37:52,336 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 17:37:52,337 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 17:37:52,338 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 17:37:52,338 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 17:37:52,339 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 17:37:52,339 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 17:37:52,341 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 17:37:52,341 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 17:37:52,342 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 17:37:52,342 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 17:37:52,344 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 17:37:52,344 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 17:37:52,344 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 17:37:52,344 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 17:37:52,345 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 17:37:52,347 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 17:37:52,348 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-22 17:37:52,375 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 17:37:52,375 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 17:37:52,376 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 17:37:52,376 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 17:37:52,376 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-22 17:37:52,376 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-22 17:37:52,377 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 17:37:52,377 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 17:37:52,377 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 17:37:52,378 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 17:37:52,378 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 17:37:52,378 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 17:37:52,379 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 17:37:52,379 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 17:37:52,379 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-22 17:37:52,379 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-22 17:37:52,379 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-22 17:37:52,380 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 17:37:52,380 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 17:37:52,380 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 17:37:52,380 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-22 17:37:52,380 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 17:37:52,380 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 17:37:52,381 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-22 17:37:52,381 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:37:52,381 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 17:37:52,381 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-22 17:37:52,381 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-22 17:37:52,382 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 17:37:52,382 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-22 17:37:52,382 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-22 17:37:52,382 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-22 17:37:52,382 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-22 17:37:52,383 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 242c9b24ea8c293cca4af0028144a97f9048375edcd4379fb21e62564563d3d5 [2022-07-22 17:37:52,584 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 17:37:52,602 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 17:37:52,604 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 17:37:52,605 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 17:37:52,606 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 17:37:52,607 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2022-07-22 17:37:52,658 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/529533501/64113fb4371945d2b6ee05b9abb923d0/FLAG63f7faf55 [2022-07-22 17:37:53,054 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 17:37:53,055 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c [2022-07-22 17:37:53,074 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/529533501/64113fb4371945d2b6ee05b9abb923d0/FLAG63f7faf55 [2022-07-22 17:37:53,429 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/529533501/64113fb4371945d2b6ee05b9abb923d0 [2022-07-22 17:37:53,431 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 17:37:53,432 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 17:37:53,435 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 17:37:53,436 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 17:37:53,438 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 17:37:53,439 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,440 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@788d0abd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53, skipping insertion in model container [2022-07-22 17:37:53,440 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,445 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 17:37:53,504 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 17:37:53,680 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-07-22 17:37:53,714 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:37:53,721 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 17:37:53,758 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-07-22 17:37:53,803 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:37:53,824 INFO L208 MainTranslator]: Completed translation [2022-07-22 17:37:53,825 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53 WrapperNode [2022-07-22 17:37:53,825 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 17:37:53,826 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 17:37:53,826 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 17:37:53,827 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 17:37:53,832 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,860 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,896 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 262 [2022-07-22 17:37:53,898 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 17:37:53,898 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 17:37:53,898 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 17:37:53,899 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 17:37:53,905 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,906 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,915 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,915 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,926 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,937 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,939 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,941 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 17:37:53,943 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 17:37:53,943 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 17:37:53,943 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 17:37:53,944 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,951 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:37:53,959 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:53,971 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-22 17:37:53,973 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-22 17:37:54,006 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 17:37:54,006 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-22 17:37:54,007 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-22 17:37:54,007 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-22 17:37:54,007 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-22 17:37:54,008 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-22 17:37:54,008 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-22 17:37:54,008 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-22 17:37:54,008 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-22 17:37:54,008 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:37:54,008 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:37:54,008 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-22 17:37:54,009 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-22 17:37:54,009 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-22 17:37:54,009 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-22 17:37:54,009 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 17:37:54,009 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-22 17:37:54,009 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-22 17:37:54,009 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 17:37:54,010 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 17:37:54,068 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 17:37:54,070 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 17:37:54,364 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 17:37:54,370 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 17:37:54,371 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-22 17:37:54,372 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:54 BoogieIcfgContainer [2022-07-22 17:37:54,372 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 17:37:54,374 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-22 17:37:54,374 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-22 17:37:54,381 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-22 17:37:54,381 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.07 05:37:53" (1/3) ... [2022-07-22 17:37:54,382 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4e7c63da and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:37:54, skipping insertion in model container [2022-07-22 17:37:54,382 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (2/3) ... [2022-07-22 17:37:54,382 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4e7c63da and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:37:54, skipping insertion in model container [2022-07-22 17:37:54,382 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:54" (3/3) ... [2022-07-22 17:37:54,383 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product51.cil.c [2022-07-22 17:37:54,395 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-22 17:37:54,396 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-22 17:37:54,444 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-22 17:37:54,457 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@7060ebc, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@2daca8c4 [2022-07-22 17:37:54,457 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-22 17:37:54,461 INFO L276 IsEmpty]: Start isEmpty. Operand has 95 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-22 17:37:54,468 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-22 17:37:54,468 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:54,469 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:54,469 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:54,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:54,474 INFO L85 PathProgramCache]: Analyzing trace with hash -6194419, now seen corresponding path program 1 times [2022-07-22 17:37:54,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:54,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1294966820] [2022-07-22 17:37:54,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:54,482 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:54,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:54,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-22 17:37:54,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:54,627 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:54,627 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:54,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1294966820] [2022-07-22 17:37:54,628 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1294966820] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:54,628 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:54,628 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-22 17:37:54,630 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [258879833] [2022-07-22 17:37:54,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:54,634 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-22 17:37:54,634 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:54,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-22 17:37:54,663 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:37:54,666 INFO L87 Difference]: Start difference. First operand has 95 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:54,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:54,713 INFO L93 Difference]: Finished difference Result 181 states and 246 transitions. [2022-07-22 17:37:54,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-22 17:37:54,715 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-22 17:37:54,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:54,723 INFO L225 Difference]: With dead ends: 181 [2022-07-22 17:37:54,723 INFO L226 Difference]: Without dead ends: 86 [2022-07-22 17:37:54,726 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:37:54,729 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:54,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:54,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-07-22 17:37:54,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-07-22 17:37:54,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 65 states have (on average 1.323076923076923) internal successors, (86), 73 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-07-22 17:37:54,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2022-07-22 17:37:54,765 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 25 [2022-07-22 17:37:54,765 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:54,765 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2022-07-22 17:37:54,766 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:54,766 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2022-07-22 17:37:54,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-22 17:37:54,772 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:54,772 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:54,772 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-22 17:37:54,772 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:54,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:54,774 INFO L85 PathProgramCache]: Analyzing trace with hash -1341011652, now seen corresponding path program 1 times [2022-07-22 17:37:54,774 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:54,775 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [306438620] [2022-07-22 17:37:54,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:54,775 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:54,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:54,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-22 17:37:54,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:54,870 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:54,870 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:54,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [306438620] [2022-07-22 17:37:54,871 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [306438620] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:54,871 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:54,871 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:37:54,871 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [690778731] [2022-07-22 17:37:54,871 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:54,872 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:37:54,873 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:54,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:37:54,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:54,874 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:54,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:54,897 INFO L93 Difference]: Finished difference Result 133 states and 171 transitions. [2022-07-22 17:37:54,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:37:54,899 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-22 17:37:54,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:54,901 INFO L225 Difference]: With dead ends: 133 [2022-07-22 17:37:54,903 INFO L226 Difference]: Without dead ends: 77 [2022-07-22 17:37:54,904 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:54,906 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 16 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:54,907 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 175 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:54,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-07-22 17:37:54,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-07-22 17:37:54,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 67 states have internal predecessors, (79), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-07-22 17:37:54,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 99 transitions. [2022-07-22 17:37:54,916 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 99 transitions. Word has length 26 [2022-07-22 17:37:54,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:54,917 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 99 transitions. [2022-07-22 17:37:54,917 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:54,919 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 99 transitions. [2022-07-22 17:37:54,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-22 17:37:54,920 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:54,920 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:54,920 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-22 17:37:54,920 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:54,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:54,921 INFO L85 PathProgramCache]: Analyzing trace with hash 1026962067, now seen corresponding path program 1 times [2022-07-22 17:37:54,921 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:54,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1751265955] [2022-07-22 17:37:54,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:54,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:54,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:37:55,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:55,014 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:55,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1751265955] [2022-07-22 17:37:55,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1751265955] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:55,017 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:55,018 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:55,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1188291953] [2022-07-22 17:37:55,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:55,019 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:55,019 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:55,020 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:55,020 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:55,021 INFO L87 Difference]: Start difference. First operand 77 states and 99 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:55,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:55,221 INFO L93 Difference]: Finished difference Result 257 states and 338 transitions. [2022-07-22 17:37:55,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-22 17:37:55,222 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-07-22 17:37:55,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:55,230 INFO L225 Difference]: With dead ends: 257 [2022-07-22 17:37:55,230 INFO L226 Difference]: Without dead ends: 188 [2022-07-22 17:37:55,231 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:37:55,232 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 267 mSDsluCounter, 330 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 267 SdHoareTripleChecker+Valid, 453 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:55,233 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [267 Valid, 453 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:55,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2022-07-22 17:37:55,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 182. [2022-07-22 17:37:55,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 137 states have (on average 1.3722627737226278) internal successors, (188), 155 states have internal predecessors, (188), 25 states have call successors, (25), 19 states have call predecessors, (25), 19 states have return successors, (26), 17 states have call predecessors, (26), 25 states have call successors, (26) [2022-07-22 17:37:55,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 239 transitions. [2022-07-22 17:37:55,256 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 239 transitions. Word has length 30 [2022-07-22 17:37:55,256 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:55,256 INFO L495 AbstractCegarLoop]: Abstraction has 182 states and 239 transitions. [2022-07-22 17:37:55,256 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:55,256 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 239 transitions. [2022-07-22 17:37:55,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-07-22 17:37:55,258 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:55,258 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:55,258 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-22 17:37:55,258 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:55,259 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:55,259 INFO L85 PathProgramCache]: Analyzing trace with hash 591965277, now seen corresponding path program 1 times [2022-07-22 17:37:55,259 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:55,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1297172461] [2022-07-22 17:37:55,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:55,260 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:55,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:55,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,371 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:55,372 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:55,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1297172461] [2022-07-22 17:37:55,372 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1297172461] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:55,372 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:55,372 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:37:55,373 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2034600167] [2022-07-22 17:37:55,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:55,373 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:37:55,373 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:55,374 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:37:55,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:37:55,374 INFO L87 Difference]: Start difference. First operand 182 states and 239 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:55,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:55,431 INFO L93 Difference]: Finished difference Result 446 states and 601 transitions. [2022-07-22 17:37:55,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-22 17:37:55,431 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-07-22 17:37:55,432 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:55,438 INFO L225 Difference]: With dead ends: 446 [2022-07-22 17:37:55,438 INFO L226 Difference]: Without dead ends: 272 [2022-07-22 17:37:55,439 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:55,445 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 57 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 377 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:55,445 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 377 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:55,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-07-22 17:37:55,478 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 255. [2022-07-22 17:37:55,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 192 states have (on average 1.3125) internal successors, (252), 209 states have internal predecessors, (252), 32 states have call successors, (32), 30 states have call predecessors, (32), 30 states have return successors, (42), 29 states have call predecessors, (42), 32 states have call successors, (42) [2022-07-22 17:37:55,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 326 transitions. [2022-07-22 17:37:55,482 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 326 transitions. Word has length 34 [2022-07-22 17:37:55,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:55,482 INFO L495 AbstractCegarLoop]: Abstraction has 255 states and 326 transitions. [2022-07-22 17:37:55,482 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:55,483 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 326 transitions. [2022-07-22 17:37:55,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-22 17:37:55,484 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:55,485 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:55,485 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-22 17:37:55,485 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:55,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:55,486 INFO L85 PathProgramCache]: Analyzing trace with hash -2050243753, now seen corresponding path program 1 times [2022-07-22 17:37:55,486 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:55,486 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [708711078] [2022-07-22 17:37:55,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:55,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:55,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:37:55,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:37:55,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,593 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:55,593 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:55,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [708711078] [2022-07-22 17:37:55,594 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [708711078] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:55,594 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:55,594 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:55,594 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2098620583] [2022-07-22 17:37:55,594 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:55,595 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:55,595 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:55,595 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:55,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:55,596 INFO L87 Difference]: Start difference. First operand 255 states and 326 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:37:55,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:55,754 INFO L93 Difference]: Finished difference Result 562 states and 730 transitions. [2022-07-22 17:37:55,755 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:37:55,755 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-22 17:37:55,756 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:55,759 INFO L225 Difference]: With dead ends: 562 [2022-07-22 17:37:55,760 INFO L226 Difference]: Without dead ends: 315 [2022-07-22 17:37:55,763 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:37:55,767 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 63 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 370 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:55,768 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 370 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:55,770 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 315 states. [2022-07-22 17:37:55,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 315 to 307. [2022-07-22 17:37:55,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 234 states have (on average 1.2905982905982907) internal successors, (302), 251 states have internal predecessors, (302), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (52), 37 states have call predecessors, (52), 36 states have call successors, (52) [2022-07-22 17:37:55,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 390 transitions. [2022-07-22 17:37:55,823 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 390 transitions. Word has length 44 [2022-07-22 17:37:55,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:55,825 INFO L495 AbstractCegarLoop]: Abstraction has 307 states and 390 transitions. [2022-07-22 17:37:55,825 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:37:55,826 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 390 transitions. [2022-07-22 17:37:55,827 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-22 17:37:55,827 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:55,827 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:55,827 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-22 17:37:55,827 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:55,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:55,828 INFO L85 PathProgramCache]: Analyzing trace with hash 555779801, now seen corresponding path program 1 times [2022-07-22 17:37:55,828 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:55,828 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [638042219] [2022-07-22 17:37:55,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:55,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:55,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:37:55,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:37:55,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,878 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:55,878 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:55,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [638042219] [2022-07-22 17:37:55,878 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [638042219] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:55,878 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:55,878 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:37:55,878 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [977756163] [2022-07-22 17:37:55,879 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:55,879 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:37:55,879 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:55,879 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:37:55,880 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:37:55,880 INFO L87 Difference]: Start difference. First operand 307 states and 390 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:37:55,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:55,995 INFO L93 Difference]: Finished difference Result 624 states and 813 transitions. [2022-07-22 17:37:55,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 17:37:55,996 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-22 17:37:55,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:55,998 INFO L225 Difference]: With dead ends: 624 [2022-07-22 17:37:55,998 INFO L226 Difference]: Without dead ends: 325 [2022-07-22 17:37:55,999 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:56,000 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 67 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:56,001 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 291 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:56,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-07-22 17:37:56,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 311. [2022-07-22 17:37:56,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 238 states have (on average 1.2857142857142858) internal successors, (306), 255 states have internal predecessors, (306), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (52), 37 states have call predecessors, (52), 36 states have call successors, (52) [2022-07-22 17:37:56,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 394 transitions. [2022-07-22 17:37:56,020 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 394 transitions. Word has length 44 [2022-07-22 17:37:56,020 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:56,020 INFO L495 AbstractCegarLoop]: Abstraction has 311 states and 394 transitions. [2022-07-22 17:37:56,021 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:37:56,021 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 394 transitions. [2022-07-22 17:37:56,022 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-22 17:37:56,022 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:56,022 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:56,023 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-22 17:37:56,023 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:56,023 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:56,023 INFO L85 PathProgramCache]: Analyzing trace with hash 978481627, now seen corresponding path program 1 times [2022-07-22 17:37:56,024 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:56,024 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [12111715] [2022-07-22 17:37:56,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:56,024 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:56,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:37:56,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:37:56,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:56,091 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:56,091 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [12111715] [2022-07-22 17:37:56,091 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [12111715] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:56,092 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:56,092 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:37:56,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1338454166] [2022-07-22 17:37:56,092 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:56,092 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:37:56,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:56,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:37:56,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:37:56,093 INFO L87 Difference]: Start difference. First operand 311 states and 394 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:37:56,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:56,275 INFO L93 Difference]: Finished difference Result 924 states and 1218 transitions. [2022-07-22 17:37:56,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:37:56,276 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-22 17:37:56,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:56,279 INFO L225 Difference]: With dead ends: 924 [2022-07-22 17:37:56,280 INFO L226 Difference]: Without dead ends: 621 [2022-07-22 17:37:56,281 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:56,282 INFO L413 NwaCegarLoop]: 144 mSDtfsCounter, 212 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 325 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:56,282 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 325 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:56,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 621 states. [2022-07-22 17:37:56,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 621 to 614. [2022-07-22 17:37:56,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 614 states, 466 states have (on average 1.2553648068669527) internal successors, (585), 495 states have internal predecessors, (585), 75 states have call successors, (75), 71 states have call predecessors, (75), 72 states have return successors, (120), 73 states have call predecessors, (120), 75 states have call successors, (120) [2022-07-22 17:37:56,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 780 transitions. [2022-07-22 17:37:56,316 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 780 transitions. Word has length 44 [2022-07-22 17:37:56,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:56,317 INFO L495 AbstractCegarLoop]: Abstraction has 614 states and 780 transitions. [2022-07-22 17:37:56,317 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:37:56,317 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 780 transitions. [2022-07-22 17:37:56,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-07-22 17:37:56,318 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:56,319 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:56,319 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-22 17:37:56,319 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:56,320 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:56,320 INFO L85 PathProgramCache]: Analyzing trace with hash 319309813, now seen corresponding path program 1 times [2022-07-22 17:37:56,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:56,320 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [758638765] [2022-07-22 17:37:56,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:56,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:56,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:37:56,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:56,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-22 17:37:56,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,380 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:56,380 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:56,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [758638765] [2022-07-22 17:37:56,381 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [758638765] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:56,381 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:56,381 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:37:56,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1463255753] [2022-07-22 17:37:56,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:56,382 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:37:56,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:56,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:37:56,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:37:56,383 INFO L87 Difference]: Start difference. First operand 614 states and 780 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-22 17:37:56,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:56,644 INFO L93 Difference]: Finished difference Result 1205 states and 1620 transitions. [2022-07-22 17:37:56,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 17:37:56,644 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 48 [2022-07-22 17:37:56,645 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:56,651 INFO L225 Difference]: With dead ends: 1205 [2022-07-22 17:37:56,651 INFO L226 Difference]: Without dead ends: 1203 [2022-07-22 17:37:56,652 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-22 17:37:56,652 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 294 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 116 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 259 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 116 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:56,653 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [298 Valid, 259 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [116 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:37:56,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1203 states. [2022-07-22 17:37:56,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1203 to 1063. [2022-07-22 17:37:56,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1063 states, 808 states have (on average 1.25990099009901) internal successors, (1018), 869 states have internal predecessors, (1018), 134 states have call successors, (134), 104 states have call predecessors, (134), 120 states have return successors, (290), 125 states have call predecessors, (290), 134 states have call successors, (290) [2022-07-22 17:37:56,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1063 states to 1063 states and 1442 transitions. [2022-07-22 17:37:56,718 INFO L78 Accepts]: Start accepts. Automaton has 1063 states and 1442 transitions. Word has length 48 [2022-07-22 17:37:56,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:56,718 INFO L495 AbstractCegarLoop]: Abstraction has 1063 states and 1442 transitions. [2022-07-22 17:37:56,718 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-22 17:37:56,718 INFO L276 IsEmpty]: Start isEmpty. Operand 1063 states and 1442 transitions. [2022-07-22 17:37:56,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2022-07-22 17:37:56,722 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:56,722 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:56,723 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-22 17:37:56,723 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:56,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:56,723 INFO L85 PathProgramCache]: Analyzing trace with hash 706311904, now seen corresponding path program 1 times [2022-07-22 17:37:56,724 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:56,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [837318127] [2022-07-22 17:37:56,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:56,724 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:56,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:37:56,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:37:56,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:37:56,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-22 17:37:56,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-22 17:37:56,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-07-22 17:37:56,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,871 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-22 17:37:56,871 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:56,871 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [837318127] [2022-07-22 17:37:56,871 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [837318127] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:37:56,871 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1778134040] [2022-07-22 17:37:56,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:56,872 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:56,872 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:56,875 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:37:56,903 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-22 17:37:56,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,982 INFO L263 TraceCheckSpWp]: Trace formula consists of 456 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-22 17:37:56,988 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:37:57,116 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:57,116 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:37:57,116 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1778134040] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:57,116 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:37:57,116 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-07-22 17:37:57,117 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1899515170] [2022-07-22 17:37:57,117 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:57,117 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:37:57,117 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:57,118 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:37:57,118 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-22 17:37:57,118 INFO L87 Difference]: Start difference. First operand 1063 states and 1442 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-22 17:37:57,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:57,191 INFO L93 Difference]: Finished difference Result 1868 states and 2582 transitions. [2022-07-22 17:37:57,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:37:57,192 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 86 [2022-07-22 17:37:57,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:57,198 INFO L225 Difference]: With dead ends: 1868 [2022-07-22 17:37:57,198 INFO L226 Difference]: Without dead ends: 944 [2022-07-22 17:37:57,202 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 106 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-22 17:37:57,204 INFO L413 NwaCegarLoop]: 139 mSDtfsCounter, 42 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:57,205 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 206 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:57,206 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 944 states. [2022-07-22 17:37:57,249 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 944 to 944. [2022-07-22 17:37:57,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 944 states, 716 states have (on average 1.2318435754189945) internal successors, (882), 769 states have internal predecessors, (882), 119 states have call successors, (119), 99 states have call predecessors, (119), 108 states have return successors, (188), 109 states have call predecessors, (188), 119 states have call successors, (188) [2022-07-22 17:37:57,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 944 states to 944 states and 1189 transitions. [2022-07-22 17:37:57,256 INFO L78 Accepts]: Start accepts. Automaton has 944 states and 1189 transitions. Word has length 86 [2022-07-22 17:37:57,256 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:57,256 INFO L495 AbstractCegarLoop]: Abstraction has 944 states and 1189 transitions. [2022-07-22 17:37:57,257 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-22 17:37:57,257 INFO L276 IsEmpty]: Start isEmpty. Operand 944 states and 1189 transitions. [2022-07-22 17:37:57,259 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-07-22 17:37:57,259 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:57,259 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:57,283 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-07-22 17:37:57,473 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:57,473 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:57,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:57,474 INFO L85 PathProgramCache]: Analyzing trace with hash -2067995951, now seen corresponding path program 1 times [2022-07-22 17:37:57,474 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:57,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238976876] [2022-07-22 17:37:57,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:57,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:57,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:37:57,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:37:57,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:37:57,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-22 17:37:57,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-22 17:37:57,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:57,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-22 17:37:57,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,619 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-22 17:37:57,619 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:57,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238976876] [2022-07-22 17:37:57,619 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238976876] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:37:57,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1193072682] [2022-07-22 17:37:57,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:57,620 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:57,620 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:57,621 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:37:57,622 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-22 17:37:57,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,747 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-22 17:37:57,750 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:37:57,795 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-22 17:37:57,796 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:37:57,796 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1193072682] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:57,796 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:37:57,796 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2022-07-22 17:37:57,797 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1070473404] [2022-07-22 17:37:57,797 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:57,797 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:37:57,797 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:57,798 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:37:57,798 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2022-07-22 17:37:57,798 INFO L87 Difference]: Start difference. First operand 944 states and 1189 transitions. Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-22 17:37:57,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:57,866 INFO L93 Difference]: Finished difference Result 1821 states and 2347 transitions. [2022-07-22 17:37:57,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 17:37:57,867 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 89 [2022-07-22 17:37:57,868 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:57,872 INFO L225 Difference]: With dead ends: 1821 [2022-07-22 17:37:57,873 INFO L226 Difference]: Without dead ends: 1016 [2022-07-22 17:37:57,875 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2022-07-22 17:37:57,876 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 33 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 400 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:57,876 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 400 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:57,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1016 states. [2022-07-22 17:37:57,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1016 to 968. [2022-07-22 17:37:57,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 968 states, 740 states have (on average 1.2243243243243243) internal successors, (906), 793 states have internal predecessors, (906), 119 states have call successors, (119), 99 states have call predecessors, (119), 108 states have return successors, (188), 109 states have call predecessors, (188), 119 states have call successors, (188) [2022-07-22 17:37:57,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 968 states to 968 states and 1213 transitions. [2022-07-22 17:37:57,929 INFO L78 Accepts]: Start accepts. Automaton has 968 states and 1213 transitions. Word has length 89 [2022-07-22 17:37:57,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:57,930 INFO L495 AbstractCegarLoop]: Abstraction has 968 states and 1213 transitions. [2022-07-22 17:37:57,930 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-22 17:37:57,930 INFO L276 IsEmpty]: Start isEmpty. Operand 968 states and 1213 transitions. [2022-07-22 17:37:57,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-07-22 17:37:57,932 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:57,933 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:57,957 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-22 17:37:58,155 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-22 17:37:58,156 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:58,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:58,156 INFO L85 PathProgramCache]: Analyzing trace with hash -1933982445, now seen corresponding path program 1 times [2022-07-22 17:37:58,156 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:58,157 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [171560272] [2022-07-22 17:37:58,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,157 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:37:58,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:37:58,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:37:58,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-22 17:37:58,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-22 17:37:58,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:58,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-22 17:37:58,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,261 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 20 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-07-22 17:37:58,261 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:58,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [171560272] [2022-07-22 17:37:58,262 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [171560272] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:37:58,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1683119490] [2022-07-22 17:37:58,262 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,262 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:58,262 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:58,264 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:37:58,274 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-22 17:37:58,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,363 INFO L263 TraceCheckSpWp]: Trace formula consists of 458 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-22 17:37:58,373 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:37:58,472 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:58,472 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:37:58,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1683119490] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:58,472 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:37:58,473 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-07-22 17:37:58,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [270851475] [2022-07-22 17:37:58,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:58,473 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:58,473 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:58,474 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:58,474 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=154, Unknown=0, NotChecked=0, Total=182 [2022-07-22 17:37:58,474 INFO L87 Difference]: Start difference. First operand 968 states and 1213 transitions. Second operand has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-22 17:37:58,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:58,567 INFO L93 Difference]: Finished difference Result 1540 states and 1945 transitions. [2022-07-22 17:37:58,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-22 17:37:58,568 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 89 [2022-07-22 17:37:58,568 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:58,571 INFO L225 Difference]: With dead ends: 1540 [2022-07-22 17:37:58,572 INFO L226 Difference]: Without dead ends: 711 [2022-07-22 17:37:58,574 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 94 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-07-22 17:37:58,575 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 145 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 491 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:58,575 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 491 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:58,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 711 states. [2022-07-22 17:37:58,606 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 711 to 663. [2022-07-22 17:37:58,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 663 states, 508 states have (on average 1.2224409448818898) internal successors, (621), 540 states have internal predecessors, (621), 75 states have call successors, (75), 73 states have call predecessors, (75), 79 states have return successors, (109), 75 states have call predecessors, (109), 75 states have call successors, (109) [2022-07-22 17:37:58,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 663 states to 663 states and 805 transitions. [2022-07-22 17:37:58,610 INFO L78 Accepts]: Start accepts. Automaton has 663 states and 805 transitions. Word has length 89 [2022-07-22 17:37:58,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:58,611 INFO L495 AbstractCegarLoop]: Abstraction has 663 states and 805 transitions. [2022-07-22 17:37:58,611 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-22 17:37:58,611 INFO L276 IsEmpty]: Start isEmpty. Operand 663 states and 805 transitions. [2022-07-22 17:37:58,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-07-22 17:37:58,613 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:58,613 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:58,638 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-22 17:37:58,827 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:58,827 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:58,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:58,828 INFO L85 PathProgramCache]: Analyzing trace with hash 692072967, now seen corresponding path program 1 times [2022-07-22 17:37:58,828 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:58,828 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1436651217] [2022-07-22 17:37:58,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:37:58,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:37:58,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:37:58,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-22 17:37:58,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-22 17:37:58,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-22 17:37:58,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-07-22 17:37:58,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,964 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-07-22 17:37:58,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:58,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1436651217] [2022-07-22 17:37:58,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1436651217] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:37:58,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1888606656] [2022-07-22 17:37:58,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,964 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:58,965 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:58,983 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:37:59,063 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-22 17:37:59,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,161 INFO L263 TraceCheckSpWp]: Trace formula consists of 475 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-22 17:37:59,164 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:37:59,174 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-22 17:37:59,174 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:37:59,174 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1888606656] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,175 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:37:59,175 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 6 [2022-07-22 17:37:59,175 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1835196400] [2022-07-22 17:37:59,175 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,176 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:37:59,176 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,176 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:37:59,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:59,177 INFO L87 Difference]: Start difference. First operand 663 states and 805 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-22 17:37:59,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:59,201 INFO L93 Difference]: Finished difference Result 822 states and 1010 transitions. [2022-07-22 17:37:59,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:37:59,202 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 94 [2022-07-22 17:37:59,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:59,203 INFO L225 Difference]: With dead ends: 822 [2022-07-22 17:37:59,203 INFO L226 Difference]: Without dead ends: 0 [2022-07-22 17:37:59,204 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 106 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:59,205 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 38 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:59,205 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 200 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:59,206 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-22 17:37:59,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-22 17:37:59,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 17:37:59,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-22 17:37:59,206 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 94 [2022-07-22 17:37:59,207 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:59,207 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-22 17:37:59,207 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-22 17:37:59,207 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-22 17:37:59,207 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-22 17:37:59,209 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-22 17:37:59,235 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-07-22 17:37:59,435 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:59,437 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-22 17:38:02,356 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 226 233) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (< ~waterLevel~0 2) (= 0 ~systemActive~0)) (or .cse0 (not (= 1 ~systemActive~0)) .cse1 (not (<= 1 ~waterLevel~0))))) [2022-07-22 17:38:02,357 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 226 233) no Hoare annotation was computed. [2022-07-22 17:38:02,357 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 226 233) no Hoare annotation was computed. [2022-07-22 17:38:02,357 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 159 165) no Hoare annotation was computed. [2022-07-22 17:38:02,357 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 159 165) the Hoare annotation is: true [2022-07-22 17:38:02,357 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 449 460) the Hoare annotation is: true [2022-07-22 17:38:02,357 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2022-07-22 17:38:02,357 INFO L899 garLoopResultBuilder]: For program point L453-1(lines 449 460) no Hoare annotation was computed. [2022-07-22 17:38:02,357 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 461 469) the Hoare annotation is: true [2022-07-22 17:38:02,357 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 461 469) no Hoare annotation was computed. [2022-07-22 17:38:02,357 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 461 469) no Hoare annotation was computed. [2022-07-22 17:38:02,357 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 527 556) no Hoare annotation was computed. [2022-07-22 17:38:02,357 INFO L899 garLoopResultBuilder]: For program point L541(lines 541 545) no Hoare annotation was computed. [2022-07-22 17:38:02,357 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 527 556) the Hoare annotation is: true [2022-07-22 17:38:02,358 INFO L902 garLoopResultBuilder]: At program point L541-1(lines 541 545) the Hoare annotation is: true [2022-07-22 17:38:02,358 INFO L899 garLoopResultBuilder]: For program point L538(line 538) no Hoare annotation was computed. [2022-07-22 17:38:02,358 INFO L902 garLoopResultBuilder]: At program point L537-2(lines 537 551) the Hoare annotation is: true [2022-07-22 17:38:02,358 INFO L902 garLoopResultBuilder]: At program point L533(line 533) the Hoare annotation is: true [2022-07-22 17:38:02,358 INFO L899 garLoopResultBuilder]: For program point L533-1(line 533) no Hoare annotation was computed. [2022-07-22 17:38:02,358 INFO L902 garLoopResultBuilder]: At program point L552(lines 527 556) the Hoare annotation is: true [2022-07-22 17:38:02,358 INFO L899 garLoopResultBuilder]: For program point L548(line 548) no Hoare annotation was computed. [2022-07-22 17:38:02,358 INFO L895 garLoopResultBuilder]: At program point L250(lines 245 253) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2 .cse11)) (.cse8 (not (= 0 ~systemActive~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 .cse2 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse4 .cse5 .cse9 .cse10 .cse8) (or .cse4 .cse5 .cse0 (and (<= 1 ~pumpRunning~0) .cse6 (<= 2 ~waterLevel~0) .cse11) .cse9 (and .cse1 .cse2 .cse11)) (or .cse4 .cse5 .cse6 .cse7 .cse0) (or .cse4 .cse10 .cse8 .cse3)))) [2022-07-22 17:38:02,359 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 376) no Hoare annotation was computed. [2022-07-22 17:38:02,359 INFO L899 garLoopResultBuilder]: For program point L139-1(lines 138 157) no Hoare annotation was computed. [2022-07-22 17:38:02,359 INFO L899 garLoopResultBuilder]: For program point L362(lines 362 379) no Hoare annotation was computed. [2022-07-22 17:38:02,359 INFO L899 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2022-07-22 17:38:02,359 INFO L895 garLoopResultBuilder]: At program point L362-1(lines 354 382) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (and .cse5 .cse6 .cse10)) (.cse4 (not (= 0 ~systemActive~0))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not .cse7)) (.cse3 (not (<= 1 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse5 .cse6 .cse7 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse8 (not (<= 1 |old(~pumpRunning~0)|)) .cse9) (or .cse0 .cse2 .cse4 .cse9) (or .cse0 .cse1 .cse8 .cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse10) (and .cse5 .cse6 .cse7 .cse10))))) [2022-07-22 17:38:02,359 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 135 158) no Hoare annotation was computed. [2022-07-22 17:38:02,359 INFO L899 garLoopResultBuilder]: For program point L197(lines 197 214) no Hoare annotation was computed. [2022-07-22 17:38:02,360 INFO L899 garLoopResultBuilder]: For program point L627(line 627) no Hoare annotation was computed. [2022-07-22 17:38:02,360 INFO L899 garLoopResultBuilder]: For program point L367(lines 367 373) no Hoare annotation was computed. [2022-07-22 17:38:02,360 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 433) no Hoare annotation was computed. [2022-07-22 17:38:02,360 INFO L895 garLoopResultBuilder]: At program point L429-2(lines 425 436) the Hoare annotation is: (let ((.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse2) (or .cse0 .cse3 .cse5 .cse1))) [2022-07-22 17:38:02,360 INFO L899 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-07-22 17:38:02,360 INFO L899 garLoopResultBuilder]: For program point L318-2(lines 318 322) no Hoare annotation was computed. [2022-07-22 17:38:02,360 INFO L895 garLoopResultBuilder]: At program point L628(lines 623 630) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse3 .cse5 .cse1) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-07-22 17:38:02,361 INFO L895 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse3 .cse5 .cse1) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-07-22 17:38:02,361 INFO L895 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse3 (not (<= 1 |old(~pumpRunning~0)|)) .cse2) (or .cse0 .cse4 .cse3 .cse5) (or .cse0 .cse4 .cse5 .cse1))) [2022-07-22 17:38:02,361 INFO L895 garLoopResultBuilder]: At program point L521(lines 516 524) the Hoare annotation is: (let ((.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) .cse2) (or .cse0 .cse3 .cse5 .cse1))) [2022-07-22 17:38:02,361 INFO L895 garLoopResultBuilder]: At program point L360(line 360) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse9 .cse8)) (.cse7 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse4 .cse1 .cse7 (and (<= 1 ~pumpRunning~0) .cse5 (<= 2 ~waterLevel~0) .cse8) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse9 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse7 (not (<= 1 |old(~pumpRunning~0)|)) .cse3) (or .cse0 (and .cse9 .cse5 (= ~waterLevel~0 1)) .cse4 .cse6 .cse2)))) [2022-07-22 17:38:02,361 INFO L899 garLoopResultBuilder]: For program point L360-1(line 360) no Hoare annotation was computed. [2022-07-22 17:38:02,361 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= 0 ~systemActive~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse3 .cse4) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse5))) [2022-07-22 17:38:02,362 INFO L895 garLoopResultBuilder]: At program point L212-1(lines 193 217) the Hoare annotation is: (let ((.cse4 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse5) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse3 (and .cse6 .cse7) .cse5 (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse7) .cse8)) (or .cse0 .cse3 .cse8 .cse1) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse5 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-07-22 17:38:02,362 INFO L899 garLoopResultBuilder]: For program point L146-1(lines 146 152) no Hoare annotation was computed. [2022-07-22 17:38:02,362 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 135 158) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (and .cse6 (= ~methAndRunningLastTime~0 0) .cse7)) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse2 .cse3) (or .cse0 (and .cse6 .cse7) .cse4 .cse8) (or .cse5 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7) .cse8)))) [2022-07-22 17:38:02,362 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 135 158) no Hoare annotation was computed. [2022-07-22 17:38:02,362 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 627) no Hoare annotation was computed. [2022-07-22 17:38:02,363 INFO L895 garLoopResultBuilder]: At program point L324(lines 309 327) the Hoare annotation is: (let ((.cse1 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse1) (or .cse2 .cse3 .cse1) (or .cse2 .cse4 .cse0 .cse5) (or .cse2 .cse4 .cse5 .cse3))) [2022-07-22 17:38:02,363 INFO L899 garLoopResultBuilder]: For program point L609(lines 609 616) no Hoare annotation was computed. [2022-07-22 17:38:02,363 INFO L899 garLoopResultBuilder]: For program point L609-2(lines 609 616) no Hoare annotation was computed. [2022-07-22 17:38:02,363 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-07-22 17:38:02,363 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-07-22 17:38:02,363 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0) (= 0 ~systemActive~0)) (and (<= 1 ~pumpRunning~0) .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:02,363 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0) (= 0 ~systemActive~0)) (and (<= 1 ~pumpRunning~0) .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:02,364 INFO L902 garLoopResultBuilder]: At program point L618(lines 599 621) the Hoare annotation is: true [2022-07-22 17:38:02,364 INFO L895 garLoopResultBuilder]: At program point L585(lines 581 587) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2022-07-22 17:38:02,364 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-22 17:38:02,364 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-22 17:38:02,364 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-22 17:38:02,364 INFO L895 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:02,364 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2022-07-22 17:38:02,364 INFO L895 garLoopResultBuilder]: At program point L417(lines 412 420) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:02,365 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-22 17:38:02,365 INFO L895 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0)) [2022-07-22 17:38:02,365 INFO L899 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2022-07-22 17:38:02,365 INFO L895 garLoopResultBuilder]: At program point L409(lines 405 411) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:02,365 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0) (= 0 ~systemActive~0)) (and (<= 1 ~pumpRunning~0) .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:02,365 INFO L902 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2022-07-22 17:38:02,365 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-07-22 17:38:02,366 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-07-22 17:38:02,366 INFO L899 garLoopResultBuilder]: For program point L67(lines 67 71) no Hoare annotation was computed. [2022-07-22 17:38:02,366 INFO L895 garLoopResultBuilder]: At program point L340(lines 328 342) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 (<= 1 ~waterLevel~0) .cse2))) [2022-07-22 17:38:02,366 INFO L902 garLoopResultBuilder]: At program point L596(lines 588 598) the Hoare annotation is: true [2022-07-22 17:38:02,366 INFO L895 garLoopResultBuilder]: At program point L402(lines 398 404) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:02,366 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2022-07-22 17:38:02,366 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2022-07-22 17:38:02,367 INFO L899 garLoopResultBuilder]: For program point L332-1(lines 332 338) no Hoare annotation was computed. [2022-07-22 17:38:02,367 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2022-07-22 17:38:02,367 INFO L895 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~6#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0) .cse7) (and (<= 1 ~pumpRunning~0) .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:02,367 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 167 191) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2022-07-22 17:38:02,367 INFO L895 garLoopResultBuilder]: At program point L223(lines 218 225) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2022-07-22 17:38:02,367 INFO L899 garLoopResultBuilder]: For program point L506(lines 506 512) no Hoare annotation was computed. [2022-07-22 17:38:02,367 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2022-07-22 17:38:02,368 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 167 191) no Hoare annotation was computed. [2022-07-22 17:38:02,368 INFO L895 garLoopResultBuilder]: At program point L511(lines 502 515) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= 1 ~waterLevel~0)) .cse2))) [2022-07-22 17:38:02,368 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 167 191) no Hoare annotation was computed. [2022-07-22 17:38:02,368 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse4 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse4)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2) .cse3)))) [2022-07-22 17:38:02,368 INFO L895 garLoopResultBuilder]: At program point L305(lines 290 308) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse3) (or .cse0 .cse2 .cse1 (< ~waterLevel~0 2) .cse3))) [2022-07-22 17:38:02,368 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 183) no Hoare annotation was computed. [2022-07-22 17:38:02,368 INFO L899 garLoopResultBuilder]: For program point L171(lines 171 188) no Hoare annotation was computed. [2022-07-22 17:38:02,369 INFO L899 garLoopResultBuilder]: For program point L299(lines 299 303) no Hoare annotation was computed. [2022-07-22 17:38:02,369 INFO L899 garLoopResultBuilder]: For program point L299-2(lines 299 303) no Hoare annotation was computed. [2022-07-22 17:38:02,369 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2022-07-22 17:38:02,369 INFO L899 garLoopResultBuilder]: For program point L441-1(lines 437 448) no Hoare annotation was computed. [2022-07-22 17:38:02,369 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 437 448) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 .cse2) (or .cse3 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1) .cse4 .cse5) (or .cse3 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1 .cse4) (or .cse3 .cse1 .cse4 .cse5 .cse2))) [2022-07-22 17:38:02,372 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:02,374 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-22 17:38:02,398 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.07 05:38:02 BoogieIcfgContainer [2022-07-22 17:38:02,398 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-22 17:38:02,399 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-22 17:38:02,399 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-22 17:38:02,399 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-22 17:38:02,400 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:54" (3/4) ... [2022-07-22 17:38:02,402 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-22 17:38:02,407 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-22 17:38:02,407 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-22 17:38:02,407 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-22 17:38:02,408 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-22 17:38:02,408 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-22 17:38:02,408 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-22 17:38:02,408 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:02,408 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-22 17:38:02,414 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-07-22 17:38:02,415 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-22 17:38:02,416 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-22 17:38:02,416 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-22 17:38:02,416 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-22 17:38:02,417 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:02,417 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:02,437 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-22 17:38:02,437 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-07-22 17:38:02,437 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-07-22 17:38:02,437 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel == 1) && tmp == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) [2022-07-22 17:38:02,438 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) [2022-07-22 17:38:02,438 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:02,439 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) [2022-07-22 17:38:02,439 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:02,440 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) [2022-07-22 17:38:02,440 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:02,440 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) [2022-07-22 17:38:02,440 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:02,440 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:02,441 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0) [2022-07-22 17:38:02,475 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-22 17:38:02,476 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-22 17:38:02,476 INFO L158 Benchmark]: Toolchain (without parser) took 9044.11ms. Allocated memory was 96.5MB in the beginning and 172.0MB in the end (delta: 75.5MB). Free memory was 56.7MB in the beginning and 91.4MB in the end (delta: -34.7MB). Peak memory consumption was 38.9MB. Max. memory is 16.1GB. [2022-07-22 17:38:02,477 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 96.5MB. Free memory was 74.1MB in the beginning and 74.1MB in the end (delta: 40.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:02,477 INFO L158 Benchmark]: CACSL2BoogieTranslator took 390.05ms. Allocated memory is still 96.5MB. Free memory was 56.5MB in the beginning and 62.3MB in the end (delta: -5.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-22 17:38:02,477 INFO L158 Benchmark]: Boogie Procedure Inliner took 71.45ms. Allocated memory is still 96.5MB. Free memory was 62.3MB in the beginning and 59.6MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:02,478 INFO L158 Benchmark]: Boogie Preprocessor took 44.01ms. Allocated memory is still 96.5MB. Free memory was 59.6MB in the beginning and 58.1MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:02,478 INFO L158 Benchmark]: RCFGBuilder took 429.59ms. Allocated memory is still 96.5MB. Free memory was 58.1MB in the beginning and 41.1MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-22 17:38:02,479 INFO L158 Benchmark]: TraceAbstraction took 8024.40ms. Allocated memory was 96.5MB in the beginning and 172.0MB in the end (delta: 75.5MB). Free memory was 40.6MB in the beginning and 97.7MB in the end (delta: -57.1MB). Peak memory consumption was 75.0MB. Max. memory is 16.1GB. [2022-07-22 17:38:02,479 INFO L158 Benchmark]: Witness Printer took 76.81ms. Allocated memory is still 172.0MB. Free memory was 97.7MB in the beginning and 91.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-22 17:38:02,482 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 96.5MB. Free memory was 74.1MB in the beginning and 74.1MB in the end (delta: 40.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 390.05ms. Allocated memory is still 96.5MB. Free memory was 56.5MB in the beginning and 62.3MB in the end (delta: -5.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 71.45ms. Allocated memory is still 96.5MB. Free memory was 62.3MB in the beginning and 59.6MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.01ms. Allocated memory is still 96.5MB. Free memory was 59.6MB in the beginning and 58.1MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 429.59ms. Allocated memory is still 96.5MB. Free memory was 58.1MB in the beginning and 41.1MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 8024.40ms. Allocated memory was 96.5MB in the beginning and 172.0MB in the end (delta: 75.5MB). Free memory was 40.6MB in the beginning and 97.7MB in the end (delta: -57.1MB). Peak memory consumption was 75.0MB. Max. memory is 16.1GB. * Witness Printer took 76.81ms. Allocated memory is still 172.0MB. Free memory was 97.7MB in the beginning and 91.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 627]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 95 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.9s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1253 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1234 mSDsluCounter, 3667 SdHoareTripleChecker+Invalid, 0.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2274 mSDsCounter, 278 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 695 IncrementalHoareTripleChecker+Invalid, 973 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 278 mSolverCounterUnsat, 1393 mSDtfsCounter, 695 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 520 GetRequests, 443 SyntacticMatches, 2 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1063occurred in iteration=8, InterpolantAutomatonStates: 62, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 288 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1976 PreInvPairs, 2090 NumberOfFragments, 1921 HoareAnnotationTreeSize, 1976 FomulaSimplifications, 432 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 43 FomulaSimplificationsInter, 6088 FormulaSimplificationTreeSizeReductionInter, 2.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 1011 NumberOfCodeBlocks, 1011 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 995 ConstructedInterpolants, 0 QuantifiedInterpolants, 1608 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1848 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 240/248 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel == 1) && tmp == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && 1 <= waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 412]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 581]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 588]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel < 2) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 245]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-07-22 17:38:02,530 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE