./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1ef39c14b0f41147d1df64069011556a64ce74ff520b071f62407c2225292c50 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 01:01:25,036 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 01:01:25,038 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 01:01:25,060 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 01:01:25,062 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 01:01:25,063 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 01:01:25,064 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 01:01:25,067 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 01:01:25,068 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 01:01:25,069 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 01:01:25,069 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 01:01:25,070 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 01:01:25,070 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 01:01:25,071 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 01:01:25,072 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 01:01:25,073 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 01:01:25,073 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 01:01:25,074 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 01:01:25,075 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 01:01:25,078 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 01:01:25,082 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 01:01:25,086 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 01:01:25,090 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 01:01:25,090 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 01:01:25,092 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 01:01:25,092 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 01:01:25,096 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 01:01:25,096 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 01:01:25,097 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 01:01:25,097 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 01:01:25,097 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 01:01:25,098 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 01:01:25,098 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 01:01:25,099 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 01:01:25,099 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 01:01:25,100 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 01:01:25,100 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 01:01:25,100 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 01:01:25,100 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 01:01:25,101 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 01:01:25,101 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 01:01:25,102 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 01:01:25,129 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 01:01:25,130 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 01:01:25,130 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 01:01:25,130 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 01:01:25,131 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 01:01:25,131 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 01:01:25,132 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 01:01:25,132 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 01:01:25,132 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 01:01:25,132 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 01:01:25,132 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 01:01:25,132 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 01:01:25,133 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 01:01:25,133 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 01:01:25,133 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 01:01:25,133 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 01:01:25,133 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 01:01:25,133 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 01:01:25,134 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 01:01:25,134 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 01:01:25,134 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 01:01:25,134 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 01:01:25,134 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 01:01:25,135 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 01:01:25,135 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:25,135 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 01:01:25,137 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 01:01:25,137 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 01:01:25,138 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 01:01:25,138 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 01:01:25,138 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 01:01:25,138 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 01:01:25,138 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 01:01:25,138 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 01:01:25,139 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1ef39c14b0f41147d1df64069011556a64ce74ff520b071f62407c2225292c50 [2021-12-16 01:01:25,362 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 01:01:25,390 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 01:01:25,392 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 01:01:25,393 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 01:01:25,394 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 01:01:25,395 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c [2021-12-16 01:01:25,449 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ddf56c7f1/167f540304674563a1a85547102b36f3/FLAG0d34d7805 [2021-12-16 01:01:25,883 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 01:01:25,884 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c [2021-12-16 01:01:25,896 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ddf56c7f1/167f540304674563a1a85547102b36f3/FLAG0d34d7805 [2021-12-16 01:01:25,910 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ddf56c7f1/167f540304674563a1a85547102b36f3 [2021-12-16 01:01:25,912 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 01:01:25,913 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 01:01:25,916 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:25,917 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 01:01:25,919 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 01:01:25,919 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:25" (1/1) ... [2021-12-16 01:01:25,920 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2da48a06 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:25, skipping insertion in model container [2021-12-16 01:01:25,920 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:25" (1/1) ... [2021-12-16 01:01:25,925 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 01:01:25,967 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 01:01:26,171 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2021-12-16 01:01:26,186 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:26,201 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 01:01:26,260 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2021-12-16 01:01:26,267 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:26,281 INFO L208 MainTranslator]: Completed translation [2021-12-16 01:01:26,282 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26 WrapperNode [2021-12-16 01:01:26,282 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:26,283 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:26,283 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 01:01:26,283 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 01:01:26,288 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,311 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,346 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 265 [2021-12-16 01:01:26,346 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:26,347 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 01:01:26,347 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 01:01:26,347 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 01:01:26,353 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,353 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,363 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,367 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,379 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,383 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,384 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,386 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 01:01:26,387 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 01:01:26,387 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 01:01:26,387 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 01:01:26,396 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (1/1) ... [2021-12-16 01:01:26,406 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:26,414 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:26,433 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 01:01:26,449 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 01:01:26,469 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 01:01:26,470 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 01:01:26,470 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 01:01:26,470 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 01:01:26,470 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 01:01:26,470 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 01:01:26,470 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 01:01:26,470 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:26,471 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:26,471 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 01:01:26,471 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 01:01:26,471 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-16 01:01:26,471 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-16 01:01:26,471 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 01:01:26,472 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 01:01:26,472 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 01:01:26,472 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 01:01:26,472 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 01:01:26,473 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 01:01:26,473 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 01:01:26,559 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 01:01:26,578 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 01:01:26,871 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 01:01:26,876 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 01:01:26,878 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 01:01:26,879 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:26 BoogieIcfgContainer [2021-12-16 01:01:26,879 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 01:01:26,880 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 01:01:26,881 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 01:01:26,884 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 01:01:26,885 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 01:01:25" (1/3) ... [2021-12-16 01:01:26,885 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@87543ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:26, skipping insertion in model container [2021-12-16 01:01:26,886 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:26" (2/3) ... [2021-12-16 01:01:26,886 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@87543ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:26, skipping insertion in model container [2021-12-16 01:01:26,886 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:26" (3/3) ... [2021-12-16 01:01:26,887 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product51.cil.c [2021-12-16 01:01:26,891 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 01:01:26,891 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 01:01:26,935 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 01:01:26,941 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 01:01:26,941 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 01:01:26,965 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-16 01:01:26,971 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-16 01:01:26,972 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:26,972 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:26,972 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:26,976 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:26,976 INFO L85 PathProgramCache]: Analyzing trace with hash 764297473, now seen corresponding path program 1 times [2021-12-16 01:01:26,981 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:26,982 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1545524143] [2021-12-16 01:01:26,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:26,982 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:27,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 01:01:27,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 01:01:27,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,148 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:27,149 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:27,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1545524143] [2021-12-16 01:01:27,149 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1545524143] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:27,150 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:27,150 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 01:01:27,151 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1501969565] [2021-12-16 01:01:27,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:27,154 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 01:01:27,154 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:27,184 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 01:01:27,185 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:27,187 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:27,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:27,234 INFO L93 Difference]: Finished difference Result 189 states and 256 transitions. [2021-12-16 01:01:27,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 01:01:27,235 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-16 01:01:27,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:27,248 INFO L225 Difference]: With dead ends: 189 [2021-12-16 01:01:27,248 INFO L226 Difference]: Without dead ends: 90 [2021-12-16 01:01:27,252 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:27,257 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:27,258 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:27,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-12-16 01:01:27,302 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-12-16 01:01:27,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-16 01:01:27,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2021-12-16 01:01:27,311 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 32 [2021-12-16 01:01:27,311 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:27,311 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2021-12-16 01:01:27,312 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:27,312 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2021-12-16 01:01:27,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-12-16 01:01:27,319 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:27,320 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:27,320 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 01:01:27,320 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:27,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:27,322 INFO L85 PathProgramCache]: Analyzing trace with hash -297054839, now seen corresponding path program 1 times [2021-12-16 01:01:27,322 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:27,322 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [105435] [2021-12-16 01:01:27,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:27,323 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:27,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:27,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 01:01:27,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,452 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:27,452 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:27,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [105435] [2021-12-16 01:01:27,452 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [105435] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:27,452 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:27,452 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:27,453 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [587757566] [2021-12-16 01:01:27,453 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:27,454 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:27,454 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:27,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:27,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:27,455 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:27,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:27,662 INFO L93 Difference]: Finished difference Result 309 states and 412 transitions. [2021-12-16 01:01:27,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-16 01:01:27,663 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-12-16 01:01:27,664 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:27,668 INFO L225 Difference]: With dead ends: 309 [2021-12-16 01:01:27,668 INFO L226 Difference]: Without dead ends: 227 [2021-12-16 01:01:27,677 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-16 01:01:27,678 INFO L933 BasicCegarLoop]: 146 mSDtfsCounter, 239 mSDsluCounter, 443 mSDsCounter, 0 mSdLazyCounter, 130 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 589 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 130 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:27,678 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [239 Valid, 589 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:27,680 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2021-12-16 01:01:27,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 221. [2021-12-16 01:01:27,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 164 states have (on average 1.329268292682927) internal successors, (218), 182 states have internal predecessors, (218), 37 states have call successors, (37), 22 states have call predecessors, (37), 19 states have return successors, (37), 26 states have call predecessors, (37), 34 states have call successors, (37) [2021-12-16 01:01:27,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 292 transitions. [2021-12-16 01:01:27,704 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 292 transitions. Word has length 37 [2021-12-16 01:01:27,704 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:27,705 INFO L470 AbstractCegarLoop]: Abstraction has 221 states and 292 transitions. [2021-12-16 01:01:27,705 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:27,705 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 292 transitions. [2021-12-16 01:01:27,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-12-16 01:01:27,706 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:27,706 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:27,706 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 01:01:27,706 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:27,707 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:27,707 INFO L85 PathProgramCache]: Analyzing trace with hash -1133604870, now seen corresponding path program 1 times [2021-12-16 01:01:27,707 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:27,710 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [642378162] [2021-12-16 01:01:27,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:27,711 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:27,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 01:01:27,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 01:01:27,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:27,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-16 01:01:27,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,774 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:27,775 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:27,775 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [642378162] [2021-12-16 01:01:27,775 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [642378162] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:27,775 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:27,776 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 01:01:27,776 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [601184149] [2021-12-16 01:01:27,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:27,777 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-16 01:01:27,777 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:27,777 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 01:01:27,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 01:01:27,778 INFO L87 Difference]: Start difference. First operand 221 states and 292 transitions. Second operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:27,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:27,873 INFO L93 Difference]: Finished difference Result 370 states and 484 transitions. [2021-12-16 01:01:27,874 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-16 01:01:27,874 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 43 [2021-12-16 01:01:27,874 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:27,876 INFO L225 Difference]: With dead ends: 370 [2021-12-16 01:01:27,886 INFO L226 Difference]: Without dead ends: 222 [2021-12-16 01:01:27,887 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 01:01:27,893 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 69 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:27,894 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 191 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:27,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2021-12-16 01:01:27,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 194. [2021-12-16 01:01:27,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 194 states, 146 states have (on average 1.3493150684931507) internal successors, (197), 164 states have internal predecessors, (197), 28 states have call successors, (28), 19 states have call predecessors, (28), 19 states have return successors, (29), 20 states have call predecessors, (29), 28 states have call successors, (29) [2021-12-16 01:01:27,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 254 transitions. [2021-12-16 01:01:27,919 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 254 transitions. Word has length 43 [2021-12-16 01:01:27,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:27,919 INFO L470 AbstractCegarLoop]: Abstraction has 194 states and 254 transitions. [2021-12-16 01:01:27,919 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:27,919 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 254 transitions. [2021-12-16 01:01:27,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-16 01:01:27,920 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:27,920 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:27,921 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 01:01:27,921 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:27,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:27,921 INFO L85 PathProgramCache]: Analyzing trace with hash 1125311, now seen corresponding path program 1 times [2021-12-16 01:01:27,921 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:27,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [77576807] [2021-12-16 01:01:27,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:27,921 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:27,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-16 01:01:27,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-16 01:01:27,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,976 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 01:01:27,976 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:27,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [77576807] [2021-12-16 01:01:27,976 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [77576807] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:27,976 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:27,976 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:27,976 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2046303516] [2021-12-16 01:01:27,976 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:27,976 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:27,977 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:27,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:27,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:27,977 INFO L87 Difference]: Start difference. First operand 194 states and 254 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:28,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:28,088 INFO L93 Difference]: Finished difference Result 478 states and 641 transitions. [2021-12-16 01:01:28,088 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 01:01:28,089 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-16 01:01:28,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:28,093 INFO L225 Difference]: With dead ends: 478 [2021-12-16 01:01:28,094 INFO L226 Difference]: Without dead ends: 292 [2021-12-16 01:01:28,094 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-16 01:01:28,100 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 49 mSDsluCounter, 380 mSDsCounter, 0 mSdLazyCounter, 68 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 497 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 68 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:28,101 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [50 Valid, 497 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 68 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:28,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 292 states. [2021-12-16 01:01:28,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 292 to 275. [2021-12-16 01:01:28,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 207 states have (on average 1.289855072463768) internal successors, (267), 224 states have internal predecessors, (267), 37 states have call successors, (37), 30 states have call predecessors, (37), 30 states have return successors, (47), 34 states have call predecessors, (47), 37 states have call successors, (47) [2021-12-16 01:01:28,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 351 transitions. [2021-12-16 01:01:28,131 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 351 transitions. Word has length 41 [2021-12-16 01:01:28,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:28,132 INFO L470 AbstractCegarLoop]: Abstraction has 275 states and 351 transitions. [2021-12-16 01:01:28,132 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:28,132 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 351 transitions. [2021-12-16 01:01:28,133 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-16 01:01:28,133 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:28,133 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:28,133 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 01:01:28,133 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:28,133 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:28,133 INFO L85 PathProgramCache]: Analyzing trace with hash 1784621037, now seen corresponding path program 1 times [2021-12-16 01:01:28,134 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:28,134 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2002444980] [2021-12-16 01:01:28,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:28,134 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:28,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:28,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:28,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-16 01:01:28,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,192 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:28,192 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:28,192 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2002444980] [2021-12-16 01:01:28,192 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2002444980] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:28,192 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:28,193 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:28,193 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1173400797] [2021-12-16 01:01:28,193 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:28,193 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:28,194 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:28,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:28,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:28,194 INFO L87 Difference]: Start difference. First operand 275 states and 351 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:28,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:28,320 INFO L93 Difference]: Finished difference Result 602 states and 780 transitions. [2021-12-16 01:01:28,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:28,321 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-12-16 01:01:28,321 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:28,323 INFO L225 Difference]: With dead ends: 602 [2021-12-16 01:01:28,335 INFO L226 Difference]: Without dead ends: 335 [2021-12-16 01:01:28,336 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:28,337 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 68 mSDsluCounter, 308 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 406 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:28,337 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [71 Valid, 406 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:28,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2021-12-16 01:01:28,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 327. [2021-12-16 01:01:28,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 249 states have (on average 1.2730923694779117) internal successors, (317), 266 states have internal predecessors, (317), 41 states have call successors, (41), 30 states have call predecessors, (41), 36 states have return successors, (57), 42 states have call predecessors, (57), 41 states have call successors, (57) [2021-12-16 01:01:28,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 415 transitions. [2021-12-16 01:01:28,356 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 415 transitions. Word has length 51 [2021-12-16 01:01:28,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:28,356 INFO L470 AbstractCegarLoop]: Abstraction has 327 states and 415 transitions. [2021-12-16 01:01:28,357 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:28,357 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 415 transitions. [2021-12-16 01:01:28,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-16 01:01:28,357 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:28,358 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:28,358 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 01:01:28,358 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:28,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:28,358 INFO L85 PathProgramCache]: Analyzing trace with hash 95677295, now seen corresponding path program 1 times [2021-12-16 01:01:28,358 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:28,358 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1301506312] [2021-12-16 01:01:28,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:28,359 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:28,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:28,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:28,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-16 01:01:28,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,486 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:28,486 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:28,486 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1301506312] [2021-12-16 01:01:28,486 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1301506312] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:28,487 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:28,487 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 01:01:28,487 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565246389] [2021-12-16 01:01:28,487 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:28,488 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 01:01:28,488 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:28,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 01:01:28,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:28,488 INFO L87 Difference]: Start difference. First operand 327 states and 415 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 6 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:28,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:28,635 INFO L93 Difference]: Finished difference Result 670 states and 873 transitions. [2021-12-16 01:01:28,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 01:01:28,635 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 6 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-12-16 01:01:28,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:28,637 INFO L225 Difference]: With dead ends: 670 [2021-12-16 01:01:28,637 INFO L226 Difference]: Without dead ends: 351 [2021-12-16 01:01:28,638 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2021-12-16 01:01:28,639 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 119 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 140 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:28,640 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [123 Valid, 440 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:28,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2021-12-16 01:01:28,655 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 331. [2021-12-16 01:01:28,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 253 states have (on average 1.2687747035573123) internal successors, (321), 270 states have internal predecessors, (321), 41 states have call successors, (41), 30 states have call predecessors, (41), 36 states have return successors, (57), 42 states have call predecessors, (57), 41 states have call successors, (57) [2021-12-16 01:01:28,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 419 transitions. [2021-12-16 01:01:28,659 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 419 transitions. Word has length 51 [2021-12-16 01:01:28,660 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:28,660 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 419 transitions. [2021-12-16 01:01:28,660 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 6 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:28,660 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 419 transitions. [2021-12-16 01:01:28,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-16 01:01:28,661 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:28,661 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:28,661 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 01:01:28,661 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:28,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:28,661 INFO L85 PathProgramCache]: Analyzing trace with hash 518379121, now seen corresponding path program 1 times [2021-12-16 01:01:28,661 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:28,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336614230] [2021-12-16 01:01:28,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:28,662 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:28,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:28,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:28,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-16 01:01:28,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,722 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:28,722 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:28,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336614230] [2021-12-16 01:01:28,722 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [336614230] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:28,722 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:28,722 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 01:01:28,722 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1874555981] [2021-12-16 01:01:28,722 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:28,723 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 01:01:28,723 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:28,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 01:01:28,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 01:01:28,724 INFO L87 Difference]: Start difference. First operand 331 states and 419 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:28,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:28,886 INFO L93 Difference]: Finished difference Result 996 states and 1308 transitions. [2021-12-16 01:01:28,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:28,886 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-12-16 01:01:28,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:28,890 INFO L225 Difference]: With dead ends: 996 [2021-12-16 01:01:28,890 INFO L226 Difference]: Without dead ends: 673 [2021-12-16 01:01:28,891 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:28,892 INFO L933 BasicCegarLoop]: 152 mSDtfsCounter, 222 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:28,893 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [229 Valid, 347 Invalid, 213 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:28,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 673 states. [2021-12-16 01:01:28,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 673 to 666. [2021-12-16 01:01:28,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 666 states, 505 states have (on average 1.2356435643564356) internal successors, (624), 534 states have internal predecessors, (624), 88 states have call successors, (88), 71 states have call predecessors, (88), 72 states have return successors, (133), 86 states have call predecessors, (133), 88 states have call successors, (133) [2021-12-16 01:01:28,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 666 states to 666 states and 845 transitions. [2021-12-16 01:01:28,922 INFO L78 Accepts]: Start accepts. Automaton has 666 states and 845 transitions. Word has length 51 [2021-12-16 01:01:28,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:28,923 INFO L470 AbstractCegarLoop]: Abstraction has 666 states and 845 transitions. [2021-12-16 01:01:28,923 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:28,924 INFO L276 IsEmpty]: Start isEmpty. Operand 666 states and 845 transitions. [2021-12-16 01:01:28,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-16 01:01:28,925 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:28,925 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:28,925 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 01:01:28,925 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:28,925 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:28,925 INFO L85 PathProgramCache]: Analyzing trace with hash -1241994025, now seen corresponding path program 1 times [2021-12-16 01:01:28,926 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:28,926 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1342975791] [2021-12-16 01:01:28,926 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:28,926 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:28,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:29,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-16 01:01:29,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-16 01:01:29,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-16 01:01:29,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,041 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:29,041 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:29,041 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1342975791] [2021-12-16 01:01:29,041 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1342975791] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:29,041 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:29,041 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-16 01:01:29,041 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [601531911] [2021-12-16 01:01:29,042 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:29,042 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-16 01:01:29,042 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:29,042 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-16 01:01:29,042 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:29,043 INFO L87 Difference]: Start difference. First operand 666 states and 845 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:29,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:29,636 INFO L93 Difference]: Finished difference Result 1802 states and 2393 transitions. [2021-12-16 01:01:29,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-16 01:01:29,637 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2021-12-16 01:01:29,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:29,641 INFO L225 Difference]: With dead ends: 1802 [2021-12-16 01:01:29,641 INFO L226 Difference]: Without dead ends: 1281 [2021-12-16 01:01:29,643 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-12-16 01:01:29,644 INFO L933 BasicCegarLoop]: 148 mSDtfsCounter, 547 mSDsluCounter, 526 mSDsCounter, 0 mSdLazyCounter, 591 mSolverCounterSat, 188 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 555 SdHoareTripleChecker+Valid, 674 SdHoareTripleChecker+Invalid, 779 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 188 IncrementalHoareTripleChecker+Valid, 591 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:29,644 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [555 Valid, 674 Invalid, 779 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [188 Valid, 591 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-16 01:01:29,645 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1281 states. [2021-12-16 01:01:29,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1281 to 1020. [2021-12-16 01:01:29,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1020 states, 776 states have (on average 1.222938144329897) internal successors, (949), 827 states have internal predecessors, (949), 131 states have call successors, (131), 98 states have call predecessors, (131), 112 states have return successors, (203), 126 states have call predecessors, (203), 131 states have call successors, (203) [2021-12-16 01:01:29,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1020 states to 1020 states and 1283 transitions. [2021-12-16 01:01:29,681 INFO L78 Accepts]: Start accepts. Automaton has 1020 states and 1283 transitions. Word has length 55 [2021-12-16 01:01:29,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:29,682 INFO L470 AbstractCegarLoop]: Abstraction has 1020 states and 1283 transitions. [2021-12-16 01:01:29,682 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:29,682 INFO L276 IsEmpty]: Start isEmpty. Operand 1020 states and 1283 transitions. [2021-12-16 01:01:29,683 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2021-12-16 01:01:29,683 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:29,683 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:29,683 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 01:01:29,683 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:29,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:29,684 INFO L85 PathProgramCache]: Analyzing trace with hash 311034572, now seen corresponding path program 1 times [2021-12-16 01:01:29,684 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:29,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1229565578] [2021-12-16 01:01:29,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:29,684 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:29,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:29,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 01:01:29,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:29,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:29,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-16 01:01:29,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2021-12-16 01:01:29,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:29,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-16 01:01:29,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,806 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 17 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-12-16 01:01:29,806 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:29,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1229565578] [2021-12-16 01:01:29,806 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1229565578] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:29,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1900260453] [2021-12-16 01:01:29,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:29,806 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:29,806 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:29,807 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:29,823 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 01:01:29,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,912 INFO L263 TraceCheckSpWp]: Trace formula consists of 471 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 01:01:29,917 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:30,157 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:01:30,157 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:30,343 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-12-16 01:01:30,343 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1900260453] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:30,343 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:30,343 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-12-16 01:01:30,343 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [80963910] [2021-12-16 01:01:30,343 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:30,344 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-12-16 01:01:30,344 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:30,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-12-16 01:01:30,344 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-12-16 01:01:30,344 INFO L87 Difference]: Start difference. First operand 1020 states and 1283 transitions. Second operand has 16 states, 16 states have (on average 7.5) internal successors, (120), 11 states have internal predecessors, (120), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2021-12-16 01:01:31,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:31,155 INFO L93 Difference]: Finished difference Result 2169 states and 2814 transitions. [2021-12-16 01:01:31,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-12-16 01:01:31,156 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.5) internal successors, (120), 11 states have internal predecessors, (120), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 96 [2021-12-16 01:01:31,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:31,157 INFO L225 Difference]: With dead ends: 2169 [2021-12-16 01:01:31,158 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 01:01:31,164 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 215 SyntacticMatches, 1 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 393 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=301, Invalid=1421, Unknown=0, NotChecked=0, Total=1722 [2021-12-16 01:01:31,165 INFO L933 BasicCegarLoop]: 226 mSDtfsCounter, 416 mSDsluCounter, 1333 mSDsCounter, 0 mSdLazyCounter, 1120 mSolverCounterSat, 188 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 417 SdHoareTripleChecker+Valid, 1559 SdHoareTripleChecker+Invalid, 1308 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 188 IncrementalHoareTripleChecker+Valid, 1120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:31,165 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [417 Valid, 1559 Invalid, 1308 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [188 Valid, 1120 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-16 01:01:31,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 01:01:31,166 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 01:01:31,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:01:31,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 01:01:31,166 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2021-12-16 01:01:31,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:31,166 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 01:01:31,166 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.5) internal successors, (120), 11 states have internal predecessors, (120), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2021-12-16 01:01:31,167 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 01:01:31,167 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 01:01:31,169 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 01:01:31,202 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:31,383 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:31,385 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 01:01:35,579 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 160 167) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3))) [2021-12-16 01:01:35,580 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 160 167) no Hoare annotation was computed. [2021-12-16 01:01:35,580 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 160 167) no Hoare annotation was computed. [2021-12-16 01:01:35,580 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 93 99) no Hoare annotation was computed. [2021-12-16 01:01:35,580 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 93 99) the Hoare annotation is: true [2021-12-16 01:01:35,580 INFO L858 garLoopResultBuilder]: For program point L881-1(lines 877 888) no Hoare annotation was computed. [2021-12-16 01:01:35,580 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 877 888) the Hoare annotation is: true [2021-12-16 01:01:35,580 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 877 888) no Hoare annotation was computed. [2021-12-16 01:01:35,580 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 279 308) no Hoare annotation was computed. [2021-12-16 01:01:35,580 INFO L861 garLoopResultBuilder]: At program point L289-2(lines 289 303) the Hoare annotation is: true [2021-12-16 01:01:35,580 INFO L861 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: true [2021-12-16 01:01:35,580 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 279 308) the Hoare annotation is: true [2021-12-16 01:01:35,580 INFO L858 garLoopResultBuilder]: For program point L285-1(line 285) no Hoare annotation was computed. [2021-12-16 01:01:35,580 INFO L861 garLoopResultBuilder]: At program point L304(lines 279 308) the Hoare annotation is: true [2021-12-16 01:01:35,581 INFO L858 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2021-12-16 01:01:35,581 INFO L858 garLoopResultBuilder]: For program point L293(lines 293 297) no Hoare annotation was computed. [2021-12-16 01:01:35,581 INFO L861 garLoopResultBuilder]: At program point L293-1(lines 293 297) the Hoare annotation is: true [2021-12-16 01:01:35,581 INFO L858 garLoopResultBuilder]: For program point L290(line 290) no Hoare annotation was computed. [2021-12-16 01:01:35,581 INFO L858 garLoopResultBuilder]: For program point L857(lines 857 861) no Hoare annotation was computed. [2021-12-16 01:01:35,581 INFO L854 garLoopResultBuilder]: At program point L857-2(lines 853 864) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4))) [2021-12-16 01:01:35,581 INFO L854 garLoopResultBuilder]: At program point L977(line 977) the Hoare annotation is: (let ((.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 .cse4) .cse5) (or .cse1 (and .cse2 .cse4 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse3 .cse4 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse5))) [2021-12-16 01:01:35,581 INFO L858 garLoopResultBuilder]: For program point L977-1(line 977) no Hoare annotation was computed. [2021-12-16 01:01:35,582 INFO L858 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2021-12-16 01:01:35,582 INFO L858 garLoopResultBuilder]: For program point L73-2(lines 69 91) no Hoare annotation was computed. [2021-12-16 01:01:35,582 INFO L858 garLoopResultBuilder]: For program point L135(lines 135 143) no Hoare annotation was computed. [2021-12-16 01:01:35,582 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 66 92) no Hoare annotation was computed. [2021-12-16 01:01:35,582 INFO L858 garLoopResultBuilder]: For program point L131(lines 131 148) no Hoare annotation was computed. [2021-12-16 01:01:35,582 INFO L858 garLoopResultBuilder]: For program point L994(lines 994 1004) no Hoare annotation was computed. [2021-12-16 01:01:35,582 INFO L858 garLoopResultBuilder]: For program point L990(lines 990 1007) no Hoare annotation was computed. [2021-12-16 01:01:35,583 INFO L854 garLoopResultBuilder]: At program point L990-1(lines 982 1010) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse3 (not .cse5)) (.cse8 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (let ((.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2) (and .cse1 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse3) .cse4)) (let ((.cse7 (<= ~waterLevel~0 2))) (or .cse5 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse6 .cse7 .cse3 .cse8) (and .cse6 .cse2 .cse7) .cse9)) (let ((.cse11 (= ~waterLevel~0 1))) (or .cse10 .cse5 (and .cse6 .cse11 .cse3 .cse8) .cse0 (and .cse6 .cse11 .cse2) .cse9)) (or .cse10 .cse0 .cse4 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)))))) [2021-12-16 01:01:35,584 INFO L854 garLoopResultBuilder]: At program point L949(lines 944 952) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4))) [2021-12-16 01:01:35,584 INFO L858 garLoopResultBuilder]: For program point L995(lines 995 1001) no Hoare annotation was computed. [2021-12-16 01:01:35,584 INFO L858 garLoopResultBuilder]: For program point L958(line 958) no Hoare annotation was computed. [2021-12-16 01:01:35,584 INFO L858 garLoopResultBuilder]: For program point L252(lines 252 256) no Hoare annotation was computed. [2021-12-16 01:01:35,584 INFO L858 garLoopResultBuilder]: For program point L252-2(lines 252 256) no Hoare annotation was computed. [2021-12-16 01:01:35,584 INFO L854 garLoopResultBuilder]: At program point L979(lines 972 981) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 .cse4) .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 .cse4 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse5) (or .cse1 (and .cse3 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:35,584 INFO L854 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4))) [2021-12-16 01:01:35,585 INFO L854 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4))) [2021-12-16 01:01:35,585 INFO L854 garLoopResultBuilder]: At program point L992(line 992) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~waterLevel~0 |old(~waterLevel~0)|) .cse3) .cse2) (let ((.cse6 (= ~waterLevel~0 1))) (or .cse0 .cse4 .cse1 (and .cse5 .cse6 .cse7) (and .cse5 .cse6 .cse3) .cse8)) (let ((.cse9 (<= ~waterLevel~0 2))) (or .cse4 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse5 .cse7 .cse9) (and .cse5 .cse9 .cse3) .cse8)))) [2021-12-16 01:01:35,585 INFO L858 garLoopResultBuilder]: For program point L992-1(line 992) no Hoare annotation was computed. [2021-12-16 01:01:35,585 INFO L854 garLoopResultBuilder]: At program point L959(lines 954 961) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse1 .cse0 .cse2) (or .cse1 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2))) [2021-12-16 01:01:35,585 INFO L854 garLoopResultBuilder]: At program point L926(lines 921 929) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|)))) (and (let ((.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2) (and .cse1 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) (not .cse3)) .cse4)) (or .cse5 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse0 .cse4) (let ((.cse7 (= ~waterLevel~0 1))) (or .cse5 .cse3 .cse0 (and .cse6 .cse7 .cse8) (and .cse6 .cse7 .cse2) .cse9)) (let ((.cse10 (<= ~waterLevel~0 2))) (or .cse3 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse6 .cse8 .cse10) (and .cse6 .cse10 .cse2) .cse9)))) [2021-12-16 01:01:35,585 INFO L854 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and (= ~waterLevel~0 |old(~waterLevel~0)|) (not .cse1) (= ~pumpRunning~0 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse1 .cse0 .cse2) (or .cse1 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2))) [2021-12-16 01:01:35,585 INFO L854 garLoopResultBuilder]: At program point L146-1(lines 127 151) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 0 ~systemActive~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 .cse3 .cse4) (and .cse2 .cse3 .cse5) .cse6)) (let ((.cse7 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse4 .cse7) (and .cse2 .cse7 .cse5) .cse6)) (let ((.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse9 (not .cse0))) (or .cse1 (and .cse8 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse9) (not (= |old(~pumpRunning~0)| 0)) (and .cse8 .cse9 .cse5))))) [2021-12-16 01:01:35,585 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 66 92) the Hoare annotation is: (let ((.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 .cse4) .cse5) (or .cse1 (and .cse2 .cse4 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse3 .cse4 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse5))) [2021-12-16 01:01:35,585 INFO L858 garLoopResultBuilder]: For program point L80-1(lines 80 86) no Hoare annotation was computed. [2021-12-16 01:01:35,585 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 66 92) no Hoare annotation was computed. [2021-12-16 01:01:35,585 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 958) no Hoare annotation was computed. [2021-12-16 01:01:35,586 INFO L854 garLoopResultBuilder]: At program point L258(lines 243 261) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4))) [2021-12-16 01:01:35,586 INFO L854 garLoopResultBuilder]: At program point L440(lines 391 441) the Hoare annotation is: false [2021-12-16 01:01:35,586 INFO L858 garLoopResultBuilder]: For program point L428(lines 428 434) no Hoare annotation was computed. [2021-12-16 01:01:35,586 INFO L854 garLoopResultBuilder]: At program point L428-2(lines 422 435) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (= 1 |ULTIMATE.start_main_~tmp~4#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse4 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-16 01:01:35,586 INFO L854 garLoopResultBuilder]: At program point L969(lines 964 971) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 |ULTIMATE.start_main_~tmp~4#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:35,587 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 01:01:35,587 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 01:01:35,587 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 01:01:35,587 INFO L858 garLoopResultBuilder]: For program point L412(lines 412 418) no Hoare annotation was computed. [2021-12-16 01:01:35,587 INFO L858 garLoopResultBuilder]: For program point L412-1(lines 412 418) no Hoare annotation was computed. [2021-12-16 01:01:35,587 INFO L854 garLoopResultBuilder]: At program point L437(lines 392 439) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (= 1 |ULTIMATE.start_main_~tmp~4#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse4 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-16 01:01:35,588 INFO L854 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (= 1 |ULTIMATE.start_main_~tmp~4#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse4 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-16 01:01:35,588 INFO L854 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (= 1 |ULTIMATE.start_main_~tmp~4#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-16 01:01:35,588 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 01:01:35,588 INFO L854 garLoopResultBuilder]: At program point L479(lines 474 482) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:35,588 INFO L854 garLoopResultBuilder]: At program point L471(lines 467 473) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:35,588 INFO L854 garLoopResultBuilder]: At program point L339(lines 335 341) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 |ULTIMATE.start_main_~tmp~4#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:35,588 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 375) no Hoare annotation was computed. [2021-12-16 01:01:35,588 INFO L858 garLoopResultBuilder]: For program point L368-2(lines 368 375) no Hoare annotation was computed. [2021-12-16 01:01:35,589 INFO L858 garLoopResultBuilder]: For program point L393(lines 392 439) no Hoare annotation was computed. [2021-12-16 01:01:35,589 INFO L858 garLoopResultBuilder]: For program point L422(lines 422 435) no Hoare annotation was computed. [2021-12-16 01:01:35,589 INFO L861 garLoopResultBuilder]: At program point L352(lines 344 354) the Hoare annotation is: true [2021-12-16 01:01:35,589 INFO L854 garLoopResultBuilder]: At program point L414(line 414) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (= 1 |ULTIMATE.start_main_~tmp~4#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse4 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-12-16 01:01:35,589 INFO L861 garLoopResultBuilder]: At program point L443(lines 382 447) the Hoare annotation is: true [2021-12-16 01:01:35,589 INFO L861 garLoopResultBuilder]: At program point L377(lines 358 380) the Hoare annotation is: true [2021-12-16 01:01:35,589 INFO L858 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2021-12-16 01:01:35,589 INFO L854 garLoopResultBuilder]: At program point L274(lines 262 276) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= 1 |ULTIMATE.start_main_~tmp~4#1|) (<= ~waterLevel~0 2) (= ~pumpRunning~0 0)) [2021-12-16 01:01:35,590 INFO L858 garLoopResultBuilder]: For program point L402-1(lines 402 408) no Hoare annotation was computed. [2021-12-16 01:01:35,590 INFO L854 garLoopResultBuilder]: At program point L464(lines 460 466) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:35,590 INFO L858 garLoopResultBuilder]: For program point L394(lines 394 398) no Hoare annotation was computed. [2021-12-16 01:01:35,590 INFO L858 garLoopResultBuilder]: For program point L266(lines 266 272) no Hoare annotation was computed. [2021-12-16 01:01:35,590 INFO L858 garLoopResultBuilder]: For program point L266-1(lines 266 272) no Hoare annotation was computed. [2021-12-16 01:01:35,590 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 101 125) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-16 01:01:35,590 INFO L854 garLoopResultBuilder]: At program point L157(lines 152 159) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:35,590 INFO L854 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:35,591 INFO L858 garLoopResultBuilder]: For program point L120-1(lines 101 125) no Hoare annotation was computed. [2021-12-16 01:01:35,591 INFO L858 garLoopResultBuilder]: For program point L934(lines 934 940) no Hoare annotation was computed. [2021-12-16 01:01:35,591 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 101 125) no Hoare annotation was computed. [2021-12-16 01:01:35,591 INFO L854 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (= ~pumpRunning~0 0)) .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:35,591 INFO L854 garLoopResultBuilder]: At program point L239(lines 224 242) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (and (<= 2 ~waterLevel~0) .cse0) .cse1 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not (= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1|)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) .cse0) .cse2 (not (= |old(~pumpRunning~0)| 0)))) (or .cse1 (not (<= 1 ~switchedOnBeforeTS~0)) .cse2 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-16 01:01:35,591 INFO L858 garLoopResultBuilder]: For program point L109(lines 109 117) no Hoare annotation was computed. [2021-12-16 01:01:35,591 INFO L854 garLoopResultBuilder]: At program point L939(lines 930 943) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (and (<= 2 ~waterLevel~0) .cse2) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse2) .cse1 (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-16 01:01:35,591 INFO L858 garLoopResultBuilder]: For program point L105(lines 105 122) no Hoare annotation was computed. [2021-12-16 01:01:35,592 INFO L858 garLoopResultBuilder]: For program point L233(lines 233 237) no Hoare annotation was computed. [2021-12-16 01:01:35,592 INFO L858 garLoopResultBuilder]: For program point L233-2(lines 233 237) no Hoare annotation was computed. [2021-12-16 01:01:35,592 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 865 876) no Hoare annotation was computed. [2021-12-16 01:01:35,592 INFO L858 garLoopResultBuilder]: For program point L869-1(lines 865 876) no Hoare annotation was computed. [2021-12-16 01:01:35,592 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 865 876) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or .cse0 (not (= ~pumpRunning~0 0)) .cse1) (or (not (<= 2 |old(~waterLevel~0)|)) .cse2 .cse0 (and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or .cse2 (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse3 .cse1))) [2021-12-16 01:01:35,592 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 179 187) no Hoare annotation was computed. [2021-12-16 01:01:35,592 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 179 187) the Hoare annotation is: true [2021-12-16 01:01:35,592 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 179 187) no Hoare annotation was computed. [2021-12-16 01:01:35,595 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:35,596 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 01:01:35,616 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 01:01:35 BoogieIcfgContainer [2021-12-16 01:01:35,616 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 01:01:35,619 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 01:01:35,620 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 01:01:35,620 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 01:01:35,620 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:26" (3/4) ... [2021-12-16 01:01:35,622 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 01:01:35,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 01:01:35,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 01:01:35,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 01:01:35,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 01:01:35,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 01:01:35,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:35,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 01:01:35,627 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-16 01:01:35,638 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-12-16 01:01:35,639 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 01:01:35,639 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 01:01:35,640 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 01:01:35,640 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 01:01:35,640 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:01:35,640 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:01:35,655 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((waterLevel == 1 && 1 == \result) && systemActive == 1) && pumpRunning == 0 [2021-12-16 01:01:35,655 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 [2021-12-16 01:01:35,656 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 [2021-12-16 01:01:35,656 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && 1 == \result) && 1 == tmp) && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && !(0 == systemActive)) || ((((splverifierCounter == 0 && 1 == \result) && 1 == tmp) && waterLevel <= 2) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 == tmp) && 1 <= pumpRunning) && waterLevel <= 2) && !(0 == systemActive)) [2021-12-16 01:01:35,657 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && waterLevel <= 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:35,657 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:35,658 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && !(0 == systemActive))) || !(\old(pumpRunning) == 0)) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel <= 2) && !(0 == systemActive)) && pumpRunning == 0)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning)))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && !(0 == systemActive)) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) [2021-12-16 01:01:35,659 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && !(0 == systemActive))) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && !(0 == systemActive)) && pumpRunning == 0)) [2021-12-16 01:01:35,659 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:35,659 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((splverifierCounter == 0 && 1 == \result) && 1 == tmp) && waterLevel <= 2) && pumpRunning == 0 [2021-12-16 01:01:35,659 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && !(0 == systemActive))) || !(\old(pumpRunning) == 0)) && (((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:35,659 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:35,660 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (!(\result == 0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:35,660 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:35,660 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (((tmp___0 == 0 && !(0 == tmp)) && \result == 0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) && (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:35,660 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:35,691 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 01:01:35,691 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 01:01:35,692 INFO L158 Benchmark]: Toolchain (without parser) took 9779.02ms. Allocated memory was 79.7MB in the beginning and 182.5MB in the end (delta: 102.8MB). Free memory was 39.4MB in the beginning and 87.9MB in the end (delta: -48.6MB). Peak memory consumption was 55.2MB. Max. memory is 16.1GB. [2021-12-16 01:01:35,692 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 79.7MB. Free memory is still 56.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:01:35,692 INFO L158 Benchmark]: CACSL2BoogieTranslator took 365.64ms. Allocated memory was 79.7MB in the beginning and 98.6MB in the end (delta: 18.9MB). Free memory was 39.2MB in the beginning and 61.2MB in the end (delta: -22.0MB). Peak memory consumption was 2.9MB. Max. memory is 16.1GB. [2021-12-16 01:01:35,692 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.88ms. Allocated memory is still 98.6MB. Free memory was 61.2MB in the beginning and 58.6MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:01:35,692 INFO L158 Benchmark]: Boogie Preprocessor took 39.14ms. Allocated memory is still 98.6MB. Free memory was 58.6MB in the beginning and 57.1MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:01:35,693 INFO L158 Benchmark]: RCFGBuilder took 492.68ms. Allocated memory is still 98.6MB. Free memory was 56.8MB in the beginning and 64.8MB in the end (delta: -8.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 01:01:35,693 INFO L158 Benchmark]: TraceAbstraction took 8738.40ms. Allocated memory was 98.6MB in the beginning and 182.5MB in the end (delta: 83.9MB). Free memory was 64.4MB in the beginning and 95.3MB in the end (delta: -30.9MB). Peak memory consumption was 102.7MB. Max. memory is 16.1GB. [2021-12-16 01:01:35,693 INFO L158 Benchmark]: Witness Printer took 72.16ms. Allocated memory is still 182.5MB. Free memory was 95.3MB in the beginning and 87.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 01:01:35,694 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 79.7MB. Free memory is still 56.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 365.64ms. Allocated memory was 79.7MB in the beginning and 98.6MB in the end (delta: 18.9MB). Free memory was 39.2MB in the beginning and 61.2MB in the end (delta: -22.0MB). Peak memory consumption was 2.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 63.88ms. Allocated memory is still 98.6MB. Free memory was 61.2MB in the beginning and 58.6MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.14ms. Allocated memory is still 98.6MB. Free memory was 58.6MB in the beginning and 57.1MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 492.68ms. Allocated memory is still 98.6MB. Free memory was 56.8MB in the beginning and 64.8MB in the end (delta: -8.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * TraceAbstraction took 8738.40ms. Allocated memory was 98.6MB in the beginning and 182.5MB in the end (delta: 83.9MB). Free memory was 64.4MB in the beginning and 95.3MB in the end (delta: -30.9MB). Peak memory consumption was 102.7MB. Max. memory is 16.1GB. * Witness Printer took 72.16ms. Allocated memory is still 182.5MB. Free memory was 95.3MB in the beginning and 87.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 958]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.7s, OverallIterations: 9, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1762 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1729 mSDsluCounter, 4828 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3628 mSDsCounter, 538 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2346 IncrementalHoareTripleChecker+Invalid, 2884 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 538 mSolverCounterUnsat, 1200 mSDtfsCounter, 2346 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 389 GetRequests, 279 SyntacticMatches, 1 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 687 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1020occurred in iteration=8, InterpolantAutomatonStates: 103, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 9 MinimizatonAttempts, 347 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 2128 PreInvPairs, 2701 NumberOfFragments, 1815 HoareAnnotationTreeSize, 2128 FomulaSimplifications, 6884 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 45 FomulaSimplificationsInter, 22637 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 553 NumberOfCodeBlocks, 553 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 638 ConstructedInterpolants, 0 QuantifiedInterpolants, 1310 SizeOfPredicates, 3 NumberOfNonLiveVariables, 471 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 11 InterpolantComputations, 8 PerfectInterpolantSequences, 97/123 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 344]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (((tmp___0 == 0 && !(0 == tmp)) && \result == 0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) && (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 262]: Loop Invariant Derived loop invariant: (((splverifierCounter == 0 && 1 == \result) && 1 == tmp) && waterLevel <= 2) && pumpRunning == 0 - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && 1 == \result) && 1 == tmp) && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && !(0 == systemActive)) || ((((splverifierCounter == 0 && 1 == \result) && 1 == tmp) && waterLevel <= 2) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 == tmp) && 1 <= pumpRunning) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 279]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (!(\result == 0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && !(0 == systemActive))) || !(\old(pumpRunning) == 0)) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel <= 2) && !(0 == systemActive)) && pumpRunning == 0)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning)))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && !(0 == systemActive)) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && !(0 == systemActive))) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && !(0 == systemActive)) && pumpRunning == 0)) - InvariantResult [Line: 382]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: ((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 358]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 972]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && waterLevel <= 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && !(0 == systemActive))) || !(\old(pumpRunning) == 0)) && (((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && 1 == \result) && systemActive == 1) && pumpRunning == 0 RESULT: Ultimate proved your program to be correct! [2021-12-16 01:01:35,721 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE