./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 88f09ec5af0f641c9edfe2f7047937341e46c7f8baabeed0fd38f069cd3b5278 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 01:01:27,677 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 01:01:27,678 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 01:01:27,713 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 01:01:27,715 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 01:01:27,716 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 01:01:27,718 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 01:01:27,721 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 01:01:27,722 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 01:01:27,724 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 01:01:27,724 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 01:01:27,726 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 01:01:27,726 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 01:01:27,730 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 01:01:27,731 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 01:01:27,732 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 01:01:27,734 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 01:01:27,735 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 01:01:27,736 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 01:01:27,739 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 01:01:27,742 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 01:01:27,743 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 01:01:27,744 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 01:01:27,745 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 01:01:27,748 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 01:01:27,751 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 01:01:27,751 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 01:01:27,752 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 01:01:27,753 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 01:01:27,753 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 01:01:27,754 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 01:01:27,754 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 01:01:27,755 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 01:01:27,756 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 01:01:27,757 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 01:01:27,757 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 01:01:27,759 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 01:01:27,759 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 01:01:27,759 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 01:01:27,760 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 01:01:27,760 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 01:01:27,761 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 01:01:27,783 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 01:01:27,783 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 01:01:27,783 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 01:01:27,784 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 01:01:27,784 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 01:01:27,785 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 01:01:27,785 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 01:01:27,785 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 01:01:27,785 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 01:01:27,786 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 01:01:27,786 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 01:01:27,786 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 01:01:27,787 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 01:01:27,787 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 01:01:27,787 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 01:01:27,787 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 01:01:27,787 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 01:01:27,787 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 01:01:27,788 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 01:01:27,788 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 01:01:27,788 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 01:01:27,788 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 01:01:27,788 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 01:01:27,789 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 01:01:27,789 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:27,789 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 01:01:27,789 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 01:01:27,789 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 01:01:27,789 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 01:01:27,790 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 01:01:27,790 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 01:01:27,790 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 01:01:27,790 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 01:01:27,790 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 01:01:27,791 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 88f09ec5af0f641c9edfe2f7047937341e46c7f8baabeed0fd38f069cd3b5278 [2021-12-16 01:01:28,026 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 01:01:28,049 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 01:01:28,052 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 01:01:28,053 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 01:01:28,053 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 01:01:28,054 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c [2021-12-16 01:01:28,097 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1482ce62d/31de84d359264967a5f28034f0bcabdb/FLAGfa84a86e4 [2021-12-16 01:01:28,512 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 01:01:28,515 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c [2021-12-16 01:01:28,528 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1482ce62d/31de84d359264967a5f28034f0bcabdb/FLAGfa84a86e4 [2021-12-16 01:01:28,540 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1482ce62d/31de84d359264967a5f28034f0bcabdb [2021-12-16 01:01:28,543 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 01:01:28,544 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 01:01:28,547 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:28,547 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 01:01:28,549 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 01:01:28,559 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,560 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@29131e02 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28, skipping insertion in model container [2021-12-16 01:01:28,561 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,566 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 01:01:28,613 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 01:01:28,805 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c[3971,3984] [2021-12-16 01:01:28,872 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:28,890 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 01:01:28,905 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c[3971,3984] [2021-12-16 01:01:28,955 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:28,975 INFO L208 MainTranslator]: Completed translation [2021-12-16 01:01:28,976 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28 WrapperNode [2021-12-16 01:01:28,976 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:28,977 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:28,977 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 01:01:28,977 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 01:01:28,982 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,991 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:29,018 INFO L137 Inliner]: procedures = 59, calls = 162, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 289 [2021-12-16 01:01:29,019 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:29,019 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 01:01:29,019 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 01:01:29,020 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 01:01:29,025 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:29,025 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:29,027 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:29,028 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:29,036 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:29,039 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:29,040 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:29,042 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 01:01:29,043 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 01:01:29,043 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 01:01:29,043 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 01:01:29,044 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:29,049 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:29,058 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:29,076 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 01:01:29,098 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 01:01:29,120 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 01:01:29,121 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 01:01:29,121 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 01:01:29,121 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 01:01:29,121 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 01:01:29,121 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 01:01:29,121 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 01:01:29,121 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:29,122 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:29,122 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 01:01:29,122 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 01:01:29,122 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-16 01:01:29,122 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-16 01:01:29,122 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-16 01:01:29,122 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-16 01:01:29,122 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 01:01:29,123 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 01:01:29,123 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 01:01:29,123 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 01:01:29,123 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 01:01:29,123 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 01:01:29,123 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 01:01:29,171 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 01:01:29,172 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 01:01:29,454 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 01:01:29,459 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 01:01:29,459 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 01:01:29,460 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:29 BoogieIcfgContainer [2021-12-16 01:01:29,460 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 01:01:29,461 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 01:01:29,461 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 01:01:29,467 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 01:01:29,467 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 01:01:28" (1/3) ... [2021-12-16 01:01:29,468 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@40e7d011 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:29, skipping insertion in model container [2021-12-16 01:01:29,468 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (2/3) ... [2021-12-16 01:01:29,468 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@40e7d011 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:29, skipping insertion in model container [2021-12-16 01:01:29,468 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:29" (3/3) ... [2021-12-16 01:01:29,469 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product54.cil.c [2021-12-16 01:01:29,473 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 01:01:29,473 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 01:01:29,505 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 01:01:29,509 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 01:01:29,509 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 01:01:29,535 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 89 states have internal predecessors, (108), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-16 01:01:29,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-16 01:01:29,541 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:29,541 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:29,542 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:29,545 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:29,545 INFO L85 PathProgramCache]: Analyzing trace with hash -17930075, now seen corresponding path program 1 times [2021-12-16 01:01:29,551 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:29,552 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [825068583] [2021-12-16 01:01:29,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:29,553 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:29,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 01:01:29,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 01:01:29,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,722 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:29,723 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:29,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [825068583] [2021-12-16 01:01:29,724 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [825068583] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:29,724 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:29,724 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 01:01:29,725 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [350174877] [2021-12-16 01:01:29,725 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:29,728 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 01:01:29,728 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:29,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 01:01:29,744 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:29,746 INFO L87 Difference]: Start difference. First operand has 106 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 89 states have internal predecessors, (108), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:29,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:29,793 INFO L93 Difference]: Finished difference Result 203 states and 274 transitions. [2021-12-16 01:01:29,794 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 01:01:29,795 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-16 01:01:29,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:29,802 INFO L225 Difference]: With dead ends: 203 [2021-12-16 01:01:29,803 INFO L226 Difference]: Without dead ends: 97 [2021-12-16 01:01:29,807 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:29,812 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:29,813 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:29,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2021-12-16 01:01:29,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2021-12-16 01:01:29,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 72 states have (on average 1.3055555555555556) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-16 01:01:29,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 125 transitions. [2021-12-16 01:01:29,859 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 125 transitions. Word has length 32 [2021-12-16 01:01:29,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:29,859 INFO L470 AbstractCegarLoop]: Abstraction has 97 states and 125 transitions. [2021-12-16 01:01:29,859 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:29,860 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 125 transitions. [2021-12-16 01:01:29,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-16 01:01:29,867 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:29,868 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:29,868 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 01:01:29,868 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:29,871 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:29,872 INFO L85 PathProgramCache]: Analyzing trace with hash 1323382524, now seen corresponding path program 1 times [2021-12-16 01:01:29,872 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:29,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1188565315] [2021-12-16 01:01:29,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:29,873 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:29,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 01:01:29,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 01:01:29,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,971 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:29,971 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:29,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1188565315] [2021-12-16 01:01:29,972 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1188565315] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:29,972 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:29,972 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 01:01:29,972 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [552061160] [2021-12-16 01:01:29,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:29,973 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 01:01:29,973 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:29,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 01:01:29,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:29,974 INFO L87 Difference]: Start difference. First operand 97 states and 125 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:29,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:29,987 INFO L93 Difference]: Finished difference Result 158 states and 204 transitions. [2021-12-16 01:01:29,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 01:01:29,987 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-16 01:01:29,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:29,988 INFO L225 Difference]: With dead ends: 158 [2021-12-16 01:01:29,988 INFO L226 Difference]: Without dead ends: 88 [2021-12-16 01:01:29,989 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:29,990 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 13 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:29,990 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 207 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:29,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2021-12-16 01:01:29,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2021-12-16 01:01:29,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 75 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-16 01:01:29,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 113 transitions. [2021-12-16 01:01:29,997 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 113 transitions. Word has length 33 [2021-12-16 01:01:29,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:29,998 INFO L470 AbstractCegarLoop]: Abstraction has 88 states and 113 transitions. [2021-12-16 01:01:29,998 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:29,998 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 113 transitions. [2021-12-16 01:01:29,999 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-16 01:01:29,999 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:29,999 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:29,999 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 01:01:29,999 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:30,000 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:30,000 INFO L85 PathProgramCache]: Analyzing trace with hash 951919944, now seen corresponding path program 1 times [2021-12-16 01:01:30,000 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:30,000 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1953379525] [2021-12-16 01:01:30,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,001 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:30,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:30,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-16 01:01:30,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,072 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:30,072 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:30,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1953379525] [2021-12-16 01:01:30,072 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1953379525] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:30,072 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:30,073 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 01:01:30,073 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1476473660] [2021-12-16 01:01:30,073 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:30,073 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 01:01:30,074 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:30,074 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 01:01:30,074 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:30,074 INFO L87 Difference]: Start difference. First operand 88 states and 113 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:30,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:30,091 INFO L93 Difference]: Finished difference Result 168 states and 219 transitions. [2021-12-16 01:01:30,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 01:01:30,091 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-16 01:01:30,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:30,092 INFO L225 Difference]: With dead ends: 168 [2021-12-16 01:01:30,093 INFO L226 Difference]: Without dead ends: 88 [2021-12-16 01:01:30,093 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:30,094 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 103 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:30,094 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [103 Valid, 111 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:30,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2021-12-16 01:01:30,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2021-12-16 01:01:30,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 75 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-16 01:01:30,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 112 transitions. [2021-12-16 01:01:30,102 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 112 transitions. Word has length 38 [2021-12-16 01:01:30,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:30,103 INFO L470 AbstractCegarLoop]: Abstraction has 88 states and 112 transitions. [2021-12-16 01:01:30,103 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:30,104 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 112 transitions. [2021-12-16 01:01:30,104 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-16 01:01:30,104 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:30,105 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:30,105 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 01:01:30,105 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:30,105 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:30,106 INFO L85 PathProgramCache]: Analyzing trace with hash 43096146, now seen corresponding path program 1 times [2021-12-16 01:01:30,106 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:30,106 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [903983083] [2021-12-16 01:01:30,106 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,106 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:30,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:30,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-16 01:01:30,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-16 01:01:30,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,220 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:30,221 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:30,221 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [903983083] [2021-12-16 01:01:30,221 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [903983083] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:30,221 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:30,221 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 01:01:30,222 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1135118126] [2021-12-16 01:01:30,222 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:30,223 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-16 01:01:30,223 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:30,223 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 01:01:30,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 01:01:30,224 INFO L87 Difference]: Start difference. First operand 88 states and 112 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:30,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:30,451 INFO L93 Difference]: Finished difference Result 252 states and 327 transitions. [2021-12-16 01:01:30,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 01:01:30,451 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-12-16 01:01:30,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:30,453 INFO L225 Difference]: With dead ends: 252 [2021-12-16 01:01:30,454 INFO L226 Difference]: Without dead ends: 172 [2021-12-16 01:01:30,455 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-16 01:01:30,457 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 158 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:30,458 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [164 Valid, 242 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 01:01:30,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2021-12-16 01:01:30,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 166. [2021-12-16 01:01:30,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 125 states have (on average 1.28) internal successors, (160), 133 states have internal predecessors, (160), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-16 01:01:30,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 211 transitions. [2021-12-16 01:01:30,500 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 211 transitions. Word has length 47 [2021-12-16 01:01:30,500 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:30,500 INFO L470 AbstractCegarLoop]: Abstraction has 166 states and 211 transitions. [2021-12-16 01:01:30,501 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:30,501 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 211 transitions. [2021-12-16 01:01:30,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-16 01:01:30,503 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:30,504 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:30,504 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 01:01:30,504 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:30,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:30,505 INFO L85 PathProgramCache]: Analyzing trace with hash 934824757, now seen corresponding path program 1 times [2021-12-16 01:01:30,507 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:30,507 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [168618052] [2021-12-16 01:01:30,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,508 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:30,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:30,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:30,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:30,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-16 01:01:30,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,655 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:30,655 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:30,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [168618052] [2021-12-16 01:01:30,655 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [168618052] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:30,655 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:30,655 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:30,656 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [275320127] [2021-12-16 01:01:30,656 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:30,657 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:30,657 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:30,657 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:30,657 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:30,658 INFO L87 Difference]: Start difference. First operand 166 states and 211 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:30,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:30,858 INFO L93 Difference]: Finished difference Result 332 states and 430 transitions. [2021-12-16 01:01:30,859 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:30,859 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-16 01:01:30,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:30,864 INFO L225 Difference]: With dead ends: 332 [2021-12-16 01:01:30,864 INFO L226 Difference]: Without dead ends: 174 [2021-12-16 01:01:30,864 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:30,868 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 75 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 462 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:30,869 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 462 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:30,870 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2021-12-16 01:01:30,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 169. [2021-12-16 01:01:30,891 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 128 states have (on average 1.2734375) internal successors, (163), 136 states have internal predecessors, (163), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-16 01:01:30,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 214 transitions. [2021-12-16 01:01:30,894 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 214 transitions. Word has length 57 [2021-12-16 01:01:30,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:30,894 INFO L470 AbstractCegarLoop]: Abstraction has 169 states and 214 transitions. [2021-12-16 01:01:30,894 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:30,895 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 214 transitions. [2021-12-16 01:01:30,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-16 01:01:30,897 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:30,897 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:30,897 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 01:01:30,897 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:30,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:30,898 INFO L85 PathProgramCache]: Analyzing trace with hash 1357526583, now seen corresponding path program 1 times [2021-12-16 01:01:30,898 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:30,898 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [968877603] [2021-12-16 01:01:30,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,898 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:30,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:30,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:30,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:30,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-16 01:01:30,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,985 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:30,985 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:30,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [968877603] [2021-12-16 01:01:30,986 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [968877603] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:30,986 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:30,986 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 01:01:30,986 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [949636346] [2021-12-16 01:01:30,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:30,987 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 01:01:30,987 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:30,988 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 01:01:30,988 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 01:01:30,988 INFO L87 Difference]: Start difference. First operand 169 states and 214 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:31,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:31,084 INFO L93 Difference]: Finished difference Result 340 states and 444 transitions. [2021-12-16 01:01:31,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 01:01:31,085 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-16 01:01:31,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:31,087 INFO L225 Difference]: With dead ends: 340 [2021-12-16 01:01:31,088 INFO L226 Difference]: Without dead ends: 179 [2021-12-16 01:01:31,088 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:31,092 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 76 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 361 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:31,093 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 361 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:31,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 179 states. [2021-12-16 01:01:31,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 179 to 171. [2021-12-16 01:01:31,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 130 states have (on average 1.2692307692307692) internal successors, (165), 138 states have internal predecessors, (165), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-16 01:01:31,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 216 transitions. [2021-12-16 01:01:31,109 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 216 transitions. Word has length 57 [2021-12-16 01:01:31,110 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:31,110 INFO L470 AbstractCegarLoop]: Abstraction has 171 states and 216 transitions. [2021-12-16 01:01:31,110 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:31,110 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 216 transitions. [2021-12-16 01:01:31,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-16 01:01:31,111 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:31,111 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:31,111 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 01:01:31,111 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:31,112 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:31,112 INFO L85 PathProgramCache]: Analyzing trace with hash -447911751, now seen corresponding path program 1 times [2021-12-16 01:01:31,112 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:31,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1731262869] [2021-12-16 01:01:31,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:31,112 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:31,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:31,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:31,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:31,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-16 01:01:31,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,201 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:31,201 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:31,201 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1731262869] [2021-12-16 01:01:31,201 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1731262869] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:31,202 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:31,202 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 01:01:31,202 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1575354226] [2021-12-16 01:01:31,202 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:31,202 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 01:01:31,203 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:31,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 01:01:31,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 01:01:31,206 INFO L87 Difference]: Start difference. First operand 171 states and 216 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:31,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:31,428 INFO L93 Difference]: Finished difference Result 484 states and 633 transitions. [2021-12-16 01:01:31,428 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:31,428 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2021-12-16 01:01:31,429 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:31,430 INFO L225 Difference]: With dead ends: 484 [2021-12-16 01:01:31,430 INFO L226 Difference]: Without dead ends: 321 [2021-12-16 01:01:31,431 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:31,431 INFO L933 BasicCegarLoop]: 167 mSDtfsCounter, 233 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 240 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:31,431 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [240 Valid, 373 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 01:01:31,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 321 states. [2021-12-16 01:01:31,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 321 to 313. [2021-12-16 01:01:31,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 313 states, 236 states have (on average 1.2415254237288136) internal successors, (293), 248 states have internal predecessors, (293), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-12-16 01:01:31,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 313 states to 313 states and 399 transitions. [2021-12-16 01:01:31,445 INFO L78 Accepts]: Start accepts. Automaton has 313 states and 399 transitions. Word has length 57 [2021-12-16 01:01:31,445 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:31,446 INFO L470 AbstractCegarLoop]: Abstraction has 313 states and 399 transitions. [2021-12-16 01:01:31,446 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:31,446 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 399 transitions. [2021-12-16 01:01:31,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-12-16 01:01:31,446 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:31,446 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:31,446 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 01:01:31,447 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:31,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:31,447 INFO L85 PathProgramCache]: Analyzing trace with hash 16145041, now seen corresponding path program 1 times [2021-12-16 01:01:31,447 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:31,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354630962] [2021-12-16 01:01:31,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:31,447 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:31,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:31,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:31,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:31,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:31,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-16 01:01:31,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,506 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 01:01:31,506 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:31,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1354630962] [2021-12-16 01:01:31,506 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1354630962] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:31,506 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:31,506 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 01:01:31,506 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [236688504] [2021-12-16 01:01:31,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:31,507 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 01:01:31,507 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:31,507 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 01:01:31,507 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:31,507 INFO L87 Difference]: Start difference. First operand 313 states and 399 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 01:01:31,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:31,710 INFO L93 Difference]: Finished difference Result 634 states and 821 transitions. [2021-12-16 01:01:31,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-16 01:01:31,711 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2021-12-16 01:01:31,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:31,712 INFO L225 Difference]: With dead ends: 634 [2021-12-16 01:01:31,712 INFO L226 Difference]: Without dead ends: 329 [2021-12-16 01:01:31,713 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-16 01:01:31,713 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 125 mSDsluCounter, 393 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 503 SdHoareTripleChecker+Invalid, 259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:31,714 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 503 Invalid, 259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:31,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2021-12-16 01:01:31,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 309. [2021-12-16 01:01:31,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 309 states, 232 states have (on average 1.2112068965517242) internal successors, (281), 244 states have internal predecessors, (281), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-12-16 01:01:31,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 309 states to 309 states and 387 transitions. [2021-12-16 01:01:31,725 INFO L78 Accepts]: Start accepts. Automaton has 309 states and 387 transitions. Word has length 59 [2021-12-16 01:01:31,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:31,726 INFO L470 AbstractCegarLoop]: Abstraction has 309 states and 387 transitions. [2021-12-16 01:01:31,726 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 01:01:31,726 INFO L276 IsEmpty]: Start isEmpty. Operand 309 states and 387 transitions. [2021-12-16 01:01:31,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-16 01:01:31,726 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:31,726 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:31,727 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 01:01:31,727 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:31,727 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:31,727 INFO L85 PathProgramCache]: Analyzing trace with hash 1464730591, now seen corresponding path program 1 times [2021-12-16 01:01:31,727 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:31,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1530462848] [2021-12-16 01:01:31,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:31,727 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:31,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:31,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 01:01:31,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-16 01:01:31,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:31,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2021-12-16 01:01:31,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,810 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:31,810 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:31,810 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1530462848] [2021-12-16 01:01:31,810 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1530462848] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:31,810 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:31,810 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-16 01:01:31,810 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1385495087] [2021-12-16 01:01:31,811 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:31,811 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-16 01:01:31,811 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:31,811 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-16 01:01:31,811 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:31,811 INFO L87 Difference]: Start difference. First operand 309 states and 387 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 01:01:32,383 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:32,384 INFO L93 Difference]: Finished difference Result 837 states and 1104 transitions. [2021-12-16 01:01:32,384 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-16 01:01:32,384 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2021-12-16 01:01:32,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:32,388 INFO L225 Difference]: With dead ends: 837 [2021-12-16 01:01:32,403 INFO L226 Difference]: Without dead ends: 592 [2021-12-16 01:01:32,405 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 279 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-12-16 01:01:32,407 INFO L933 BasicCegarLoop]: 152 mSDtfsCounter, 599 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 620 mSolverCounterSat, 251 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 604 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 871 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 251 IncrementalHoareTripleChecker+Valid, 620 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:32,407 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [604 Valid, 583 Invalid, 871 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [251 Valid, 620 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-16 01:01:32,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2021-12-16 01:01:32,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 483. [2021-12-16 01:01:32,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 483 states, 363 states have (on average 1.2011019283746556) internal successors, (436), 385 states have internal predecessors, (436), 62 states have call successors, (62), 47 states have call predecessors, (62), 57 states have return successors, (104), 62 states have call predecessors, (104), 62 states have call successors, (104) [2021-12-16 01:01:32,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 483 states to 483 states and 602 transitions. [2021-12-16 01:01:32,448 INFO L78 Accepts]: Start accepts. Automaton has 483 states and 602 transitions. Word has length 61 [2021-12-16 01:01:32,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:32,460 INFO L470 AbstractCegarLoop]: Abstraction has 483 states and 602 transitions. [2021-12-16 01:01:32,460 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 01:01:32,460 INFO L276 IsEmpty]: Start isEmpty. Operand 483 states and 602 transitions. [2021-12-16 01:01:32,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2021-12-16 01:01:32,465 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:32,465 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:32,465 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-16 01:01:32,465 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:32,466 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:32,466 INFO L85 PathProgramCache]: Analyzing trace with hash -2028217141, now seen corresponding path program 1 times [2021-12-16 01:01:32,466 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:32,466 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1449536644] [2021-12-16 01:01:32,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:32,466 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:32,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:32,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 01:01:32,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:32,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:32,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:32,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-16 01:01:32,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-16 01:01:32,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 01:01:32,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:32,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-16 01:01:32,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,639 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 16 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 01:01:32,639 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:32,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1449536644] [2021-12-16 01:01:32,639 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1449536644] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:32,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1447836512] [2021-12-16 01:01:32,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:32,640 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:32,640 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:32,641 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:32,642 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 01:01:32,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:32,757 INFO L263 TraceCheckSpWp]: Trace formula consists of 512 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 01:01:32,763 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:33,088 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 27 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:01:33,088 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:33,420 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 01:01:33,421 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1447836512] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:33,421 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:33,421 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-16 01:01:33,421 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1173395621] [2021-12-16 01:01:33,421 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:33,422 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-16 01:01:33,422 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:33,422 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-16 01:01:33,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-16 01:01:33,423 INFO L87 Difference]: Start difference. First operand 483 states and 602 transitions. Second operand has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2021-12-16 01:01:34,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:34,288 INFO L93 Difference]: Finished difference Result 988 states and 1259 transitions. [2021-12-16 01:01:34,289 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2021-12-16 01:01:34,289 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) Word has length 111 [2021-12-16 01:01:34,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:34,290 INFO L225 Difference]: With dead ends: 988 [2021-12-16 01:01:34,290 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 01:01:34,292 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 250 SyntacticMatches, 1 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 324 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=345, Invalid=1137, Unknown=0, NotChecked=0, Total=1482 [2021-12-16 01:01:34,293 INFO L933 BasicCegarLoop]: 219 mSDtfsCounter, 508 mSDsluCounter, 791 mSDsCounter, 0 mSdLazyCounter, 797 mSolverCounterSat, 247 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 512 SdHoareTripleChecker+Valid, 1010 SdHoareTripleChecker+Invalid, 1044 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 247 IncrementalHoareTripleChecker+Valid, 797 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:34,294 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [512 Valid, 1010 Invalid, 1044 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [247 Valid, 797 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-16 01:01:34,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 01:01:34,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 01:01:34,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:01:34,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 01:01:34,295 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 111 [2021-12-16 01:01:34,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:34,296 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 01:01:34,296 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2021-12-16 01:01:34,296 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 01:01:34,296 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 01:01:34,298 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 01:01:34,325 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:34,516 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-16 01:01:34,517 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 01:01:37,727 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 450 457) the Hoare annotation is: (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (= 1 ~systemActive~0)) (not (<= ~waterLevel~0 2)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) [2021-12-16 01:01:37,727 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 450 457) no Hoare annotation was computed. [2021-12-16 01:01:37,727 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 450 457) no Hoare annotation was computed. [2021-12-16 01:01:37,728 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 357 363) no Hoare annotation was computed. [2021-12-16 01:01:37,728 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 357 363) the Hoare annotation is: true [2021-12-16 01:01:37,728 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 135 146) the Hoare annotation is: true [2021-12-16 01:01:37,728 INFO L858 garLoopResultBuilder]: For program point L139-1(lines 135 146) no Hoare annotation was computed. [2021-12-16 01:01:37,728 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 135 146) no Hoare annotation was computed. [2021-12-16 01:01:37,728 INFO L854 garLoopResultBuilder]: At program point L217(lines 212 219) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2))) [2021-12-16 01:01:37,728 INFO L854 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (let ((.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|)))) (and (let ((.cse4 (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) (and .cse3 .cse4 .cse6) .cse7)) (or .cse0 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse1 .cse2 .cse8) (let ((.cse9 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse9 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse1 (and .cse9 .cse6) .cse2 .cse8)) (let ((.cse10 (<= ~waterLevel~0 2))) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse3 .cse5 .cse10) (and .cse3 .cse10 .cse6) .cse7)))) [2021-12-16 01:01:37,728 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-12-16 01:01:37,728 INFO L854 garLoopResultBuilder]: At program point L436(line 436) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse0 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2))) [2021-12-16 01:01:37,728 INFO L854 garLoopResultBuilder]: At program point L436-1(lines 417 441) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|)))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 .cse3 .cse4) (and .cse2 .cse3 .cse5) .cse6)) (let ((.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse7 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 (and .cse7 .cse5) .cse1 (not (= |old(~pumpRunning~0)| 0)))) (let ((.cse8 (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse4 .cse8) (and .cse2 .cse8 .cse5) .cse6)))) [2021-12-16 01:01:37,728 INFO L858 garLoopResultBuilder]: For program point L337(lines 337 343) no Hoare annotation was computed. [2021-12-16 01:01:37,728 INFO L854 garLoopResultBuilder]: At program point L465(lines 458 468) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-16 01:01:37,728 INFO L858 garLoopResultBuilder]: For program point L337-2(lines 333 355) no Hoare annotation was computed. [2021-12-16 01:01:37,729 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 330 356) no Hoare annotation was computed. [2021-12-16 01:01:37,729 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (and (<= 1 ~switchedOnBeforeTS~0) .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and .cse1 (= ~pumpRunning~0 0)) .cse2 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse2 .cse3 .cse4) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3 .cse4)))) [2021-12-16 01:01:37,729 INFO L854 garLoopResultBuilder]: At program point L152(lines 147 155) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-16 01:01:37,729 INFO L858 garLoopResultBuilder]: For program point L115(lines 115 119) no Hoare annotation was computed. [2021-12-16 01:01:37,729 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (let ((.cse4 (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) (and .cse3 .cse4 .cse6) .cse7)) (or .cse1 (and (= ~waterLevel~0 |old(~waterLevel~0)|) .cse6) .cse2 .cse8) (let ((.cse9 (<= ~waterLevel~0 2))) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse3 .cse5 .cse9) (and .cse3 .cse9 .cse6) .cse7)) (or .cse0 .cse1 .cse2 .cse8))) [2021-12-16 01:01:37,729 INFO L854 garLoopResultBuilder]: At program point L115-2(lines 111 122) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-16 01:01:37,729 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-12-16 01:01:37,729 INFO L858 garLoopResultBuilder]: For program point L425(lines 425 433) no Hoare annotation was computed. [2021-12-16 01:01:37,729 INFO L858 garLoopResultBuilder]: For program point L421(lines 421 438) no Hoare annotation was computed. [2021-12-16 01:01:37,729 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and .cse1 .cse2 (= ~pumpRunning~0 0)) .cse3 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse3 .cse4 (and .cse5 .cse2 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 (and .cse1 .cse5 .cse2) .cse4))) [2021-12-16 01:01:37,729 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-12-16 01:01:37,729 INFO L858 garLoopResultBuilder]: For program point L216(line 216) no Hoare annotation was computed. [2021-12-16 01:01:37,729 INFO L858 garLoopResultBuilder]: For program point L344-1(lines 344 350) no Hoare annotation was computed. [2021-12-16 01:01:37,729 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-12-16 01:01:37,730 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-12-16 01:01:37,730 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 330 356) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and .cse1 .cse2 (= ~pumpRunning~0 0)) .cse3 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse3 .cse4 (and .cse5 .cse2 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 (and .cse1 .cse5 .cse2) .cse4))) [2021-12-16 01:01:37,730 INFO L854 garLoopResultBuilder]: At program point L431(line 431) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-16 01:01:37,730 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|)))) (and (let ((.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse1 (and .cse0 .cse2) .cse3 .cse4)) (let ((.cse7 (= ~waterLevel~0 1))) (or .cse5 .cse1 .cse3 (and .cse6 .cse7 .cse2) (and .cse6 .cse7 .cse8) .cse9)) (or .cse5 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) .cse1 .cse3 .cse4) (let ((.cse10 (<= ~waterLevel~0 2))) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 (and .cse6 .cse2 .cse10) (and .cse6 .cse10 .cse8) .cse9)))) [2021-12-16 01:01:37,730 INFO L854 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-16 01:01:37,730 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 330 356) no Hoare annotation was computed. [2021-12-16 01:01:37,730 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 216) no Hoare annotation was computed. [2021-12-16 01:01:37,730 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 223 252) no Hoare annotation was computed. [2021-12-16 01:01:37,730 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 223 252) the Hoare annotation is: true [2021-12-16 01:01:37,730 INFO L861 garLoopResultBuilder]: At program point L248(lines 223 252) the Hoare annotation is: true [2021-12-16 01:01:37,730 INFO L858 garLoopResultBuilder]: For program point L244(line 244) no Hoare annotation was computed. [2021-12-16 01:01:37,730 INFO L858 garLoopResultBuilder]: For program point L237(lines 237 241) no Hoare annotation was computed. [2021-12-16 01:01:37,730 INFO L861 garLoopResultBuilder]: At program point L237-1(lines 237 241) the Hoare annotation is: true [2021-12-16 01:01:37,730 INFO L858 garLoopResultBuilder]: For program point L234(line 234) no Hoare annotation was computed. [2021-12-16 01:01:37,731 INFO L861 garLoopResultBuilder]: At program point L233-2(lines 233 247) the Hoare annotation is: true [2021-12-16 01:01:37,731 INFO L861 garLoopResultBuilder]: At program point L229(line 229) the Hoare annotation is: true [2021-12-16 01:01:37,731 INFO L858 garLoopResultBuilder]: For program point L229-1(line 229) no Hoare annotation was computed. [2021-12-16 01:01:37,731 INFO L858 garLoopResultBuilder]: For program point L609(lines 609 613) no Hoare annotation was computed. [2021-12-16 01:01:37,731 INFO L854 garLoopResultBuilder]: At program point L609-2(lines 601 614) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-16 01:01:37,731 INFO L858 garLoopResultBuilder]: For program point L572(lines 571 618) no Hoare annotation was computed. [2021-12-16 01:01:37,737 INFO L858 garLoopResultBuilder]: For program point L601(lines 601 614) no Hoare annotation was computed. [2021-12-16 01:01:37,737 INFO L854 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-16 01:01:37,737 INFO L861 garLoopResultBuilder]: At program point L622(lines 561 626) the Hoare annotation is: true [2021-12-16 01:01:37,737 INFO L858 garLoopResultBuilder]: For program point L581(lines 581 587) no Hoare annotation was computed. [2021-12-16 01:01:37,737 INFO L858 garLoopResultBuilder]: For program point L581-1(lines 581 587) no Hoare annotation was computed. [2021-12-16 01:01:37,737 INFO L854 garLoopResultBuilder]: At program point L643(lines 639 645) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:37,738 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 01:01:37,738 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 01:01:37,738 INFO L858 garLoopResultBuilder]: For program point L573(lines 573 577) no Hoare annotation was computed. [2021-12-16 01:01:37,738 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 01:01:37,738 INFO L854 garLoopResultBuilder]: At program point L557(lines 552 559) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-16 01:01:37,738 INFO L854 garLoopResultBuilder]: At program point L619(lines 570 620) the Hoare annotation is: false [2021-12-16 01:01:37,738 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 01:01:37,739 INFO L858 garLoopResultBuilder]: For program point L310(lines 310 317) no Hoare annotation was computed. [2021-12-16 01:01:37,739 INFO L858 garLoopResultBuilder]: For program point L310-2(lines 310 317) no Hoare annotation was computed. [2021-12-16 01:01:37,739 INFO L858 garLoopResultBuilder]: For program point L591(lines 591 597) no Hoare annotation was computed. [2021-12-16 01:01:37,739 INFO L858 garLoopResultBuilder]: For program point L591-1(lines 591 597) no Hoare annotation was computed. [2021-12-16 01:01:37,739 INFO L854 garLoopResultBuilder]: At program point L616(lines 571 618) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-16 01:01:37,739 INFO L854 garLoopResultBuilder]: At program point L583(line 583) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-16 01:01:37,739 INFO L861 garLoopResultBuilder]: At program point L294(lines 286 296) the Hoare annotation is: true [2021-12-16 01:01:37,739 INFO L861 garLoopResultBuilder]: At program point L319(lines 300 322) the Hoare annotation is: true [2021-12-16 01:01:37,741 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:37,741 INFO L854 garLoopResultBuilder]: At program point L282(lines 278 284) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:37,741 INFO L854 garLoopResultBuilder]: At program point L658(lines 653 661) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:37,741 INFO L854 garLoopResultBuilder]: At program point L650(lines 646 652) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:37,741 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 365 389) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-16 01:01:37,741 INFO L858 garLoopResultBuilder]: For program point L192(lines 192 198) no Hoare annotation was computed. [2021-12-16 01:01:37,741 INFO L854 garLoopResultBuilder]: At program point L384(line 384) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:37,742 INFO L858 garLoopResultBuilder]: For program point L384-1(lines 365 389) no Hoare annotation was computed. [2021-12-16 01:01:37,742 INFO L854 garLoopResultBuilder]: At program point L529(lines 514 532) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-16 01:01:37,742 INFO L858 garLoopResultBuilder]: For program point L523(lines 523 527) no Hoare annotation was computed. [2021-12-16 01:01:37,742 INFO L858 garLoopResultBuilder]: For program point L523-2(lines 523 527) no Hoare annotation was computed. [2021-12-16 01:01:37,742 INFO L854 garLoopResultBuilder]: At program point L197(lines 188 201) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (and (<= 2 ~waterLevel~0) .cse2) .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse2) .cse1 (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-16 01:01:37,742 INFO L854 garLoopResultBuilder]: At program point L447(lines 442 449) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:37,742 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 365 389) no Hoare annotation was computed. [2021-12-16 01:01:37,743 INFO L854 garLoopResultBuilder]: At program point L379(line 379) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) (= ~pumpRunning~0 0)) .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-16 01:01:37,743 INFO L858 garLoopResultBuilder]: For program point L373(lines 373 381) no Hoare annotation was computed. [2021-12-16 01:01:37,743 INFO L858 garLoopResultBuilder]: For program point L369(lines 369 386) no Hoare annotation was computed. [2021-12-16 01:01:37,743 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 123 134) no Hoare annotation was computed. [2021-12-16 01:01:37,743 INFO L858 garLoopResultBuilder]: For program point L127-1(lines 123 134) no Hoare annotation was computed. [2021-12-16 01:01:37,743 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 123 134) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse2) (or .cse0 (not (= ~pumpRunning~0 0)) .cse1 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse2 .cse3))) [2021-12-16 01:01:37,744 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 391 415) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-16 01:01:37,744 INFO L854 garLoopResultBuilder]: At program point L405(line 405) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:37,744 INFO L854 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:37,744 INFO L854 garLoopResultBuilder]: At program point L207(lines 202 210) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:37,744 INFO L858 garLoopResultBuilder]: For program point L399(lines 399 407) no Hoare annotation was computed. [2021-12-16 01:01:37,744 INFO L858 garLoopResultBuilder]: For program point L395(lines 395 412) no Hoare annotation was computed. [2021-12-16 01:01:37,744 INFO L854 garLoopResultBuilder]: At program point L548(lines 533 551) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:37,744 INFO L858 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2021-12-16 01:01:37,745 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 391 415) no Hoare annotation was computed. [2021-12-16 01:01:37,745 INFO L858 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2021-12-16 01:01:37,745 INFO L854 garLoopResultBuilder]: At program point L410(line 410) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-16 01:01:37,745 INFO L858 garLoopResultBuilder]: For program point L410-1(lines 391 415) no Hoare annotation was computed. [2021-12-16 01:01:37,745 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 469 477) no Hoare annotation was computed. [2021-12-16 01:01:37,746 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 469 477) the Hoare annotation is: true [2021-12-16 01:01:37,746 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 469 477) no Hoare annotation was computed. [2021-12-16 01:01:37,748 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:37,749 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 01:01:37,799 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 01:01:37 BoogieIcfgContainer [2021-12-16 01:01:37,799 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 01:01:37,800 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 01:01:37,800 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 01:01:37,800 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 01:01:37,801 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:29" (3/4) ... [2021-12-16 01:01:37,802 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 01:01:37,807 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 01:01:37,807 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 01:01:37,807 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 01:01:37,807 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 01:01:37,808 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 01:01:37,823 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:37,823 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 01:01:37,823 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-16 01:01:37,823 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-16 01:01:37,833 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2021-12-16 01:01:37,834 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 01:01:37,834 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 01:01:37,834 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 01:01:37,834 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 01:01:37,835 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:01:37,835 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:01:37,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:37,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:37,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:37,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:37,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:37,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:37,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:37,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:37,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:37,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || (\result == 1 && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:37,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:37,865 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) && (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:37,866 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:37,899 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 01:01:37,899 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 01:01:37,900 INFO L158 Benchmark]: Toolchain (without parser) took 9355.27ms. Allocated memory was 75.5MB in the beginning and 184.5MB in the end (delta: 109.1MB). Free memory was 39.3MB in the beginning and 58.8MB in the end (delta: -19.5MB). Peak memory consumption was 89.1MB. Max. memory is 16.1GB. [2021-12-16 01:01:37,900 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 75.5MB. Free memory was 56.4MB in the beginning and 56.4MB in the end (delta: 42.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:01:37,900 INFO L158 Benchmark]: CACSL2BoogieTranslator took 429.78ms. Allocated memory was 75.5MB in the beginning and 104.9MB in the end (delta: 29.4MB). Free memory was 39.1MB in the beginning and 70.0MB in the end (delta: -30.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-16 01:01:37,900 INFO L158 Benchmark]: Boogie Procedure Inliner took 42.04ms. Allocated memory is still 104.9MB. Free memory was 70.0MB in the beginning and 67.4MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:01:37,900 INFO L158 Benchmark]: Boogie Preprocessor took 23.22ms. Allocated memory is still 104.9MB. Free memory was 67.4MB in the beginning and 65.6MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:01:37,904 INFO L158 Benchmark]: RCFGBuilder took 417.08ms. Allocated memory is still 104.9MB. Free memory was 65.6MB in the beginning and 47.9MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-16 01:01:37,905 INFO L158 Benchmark]: TraceAbstraction took 8338.03ms. Allocated memory was 104.9MB in the beginning and 184.5MB in the end (delta: 79.7MB). Free memory was 47.6MB in the beginning and 67.2MB in the end (delta: -19.7MB). Peak memory consumption was 74.3MB. Max. memory is 16.1GB. [2021-12-16 01:01:37,905 INFO L158 Benchmark]: Witness Printer took 99.42ms. Allocated memory is still 184.5MB. Free memory was 67.2MB in the beginning and 58.8MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 01:01:37,921 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 75.5MB. Free memory was 56.4MB in the beginning and 56.4MB in the end (delta: 42.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 429.78ms. Allocated memory was 75.5MB in the beginning and 104.9MB in the end (delta: 29.4MB). Free memory was 39.1MB in the beginning and 70.0MB in the end (delta: -30.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 42.04ms. Allocated memory is still 104.9MB. Free memory was 70.0MB in the beginning and 67.4MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 23.22ms. Allocated memory is still 104.9MB. Free memory was 67.4MB in the beginning and 65.6MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 417.08ms. Allocated memory is still 104.9MB. Free memory was 65.6MB in the beginning and 47.9MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 8338.03ms. Allocated memory was 104.9MB in the beginning and 184.5MB in the end (delta: 79.7MB). Free memory was 47.6MB in the beginning and 67.2MB in the end (delta: -19.7MB). Peak memory consumption was 74.3MB. Max. memory is 16.1GB. * Witness Printer took 99.42ms. Allocated memory is still 184.5MB. Free memory was 67.2MB in the beginning and 58.8MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 216]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.2s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1928 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1890 mSDsluCounter, 3986 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2638 mSDsCounter, 699 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2101 IncrementalHoareTripleChecker+Invalid, 2800 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 699 mSolverCounterUnsat, 1348 mSDtfsCounter, 2101 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 445 GetRequests, 338 SyntacticMatches, 2 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 632 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=483occurred in iteration=9, InterpolantAutomatonStates: 101, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 156 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 1202 PreInvPairs, 1402 NumberOfFragments, 1981 HoareAnnotationTreeSize, 1202 FomulaSimplifications, 1456 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 50 FomulaSimplificationsInter, 9908 FormulaSimplificationTreeSizeReductionInter, 3.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 663 NumberOfCodeBlocks, 663 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 762 ConstructedInterpolants, 0 QuantifiedInterpolants, 1506 SizeOfPredicates, 3 NumberOfNonLiveVariables, 512 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 107/141 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 639]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 417]: Loop Invariant Derived loop invariant: ((((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 278]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && waterLevel <= 2) && systemActive == 1) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == 1)) || ((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && systemActive == 1) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || (\result == 1 && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 570]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 286]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 223]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 514]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) && (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 212]: Loop Invariant Derived loop invariant: (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 653]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && waterLevel <= 2) && systemActive == 1) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == 1)) || ((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && systemActive == 1) - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-12-16 01:01:37,981 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE