./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:09:42,621 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:09:42,627 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:09:42,677 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:09:42,678 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:09:42,681 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:09:42,683 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:09:42,686 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:09:42,688 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:09:42,693 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:09:42,694 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:09:42,695 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:09:42,695 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:09:42,697 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:09:42,698 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:09:42,700 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:09:42,700 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:09:42,701 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:09:42,702 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:09:42,704 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:09:42,705 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:09:42,706 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:09:42,707 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:09:42,708 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:09:42,710 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:09:42,711 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:09:42,712 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:09:42,713 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:09:42,714 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:09:42,715 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:09:42,715 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:09:42,716 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:09:42,717 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:09:42,717 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:09:42,718 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:09:42,718 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:09:42,719 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:09:42,719 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:09:42,720 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:09:42,720 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:09:42,721 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:09:42,722 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:09:42,757 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:09:42,758 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:09:42,759 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:09:42,759 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:09:42,760 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:09:42,760 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:09:42,760 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:09:42,761 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:09:42,761 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:09:42,761 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:09:42,762 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:09:42,762 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:09:42,762 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:09:42,762 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:09:42,762 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:09:42,762 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:09:42,762 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:09:42,763 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:09:42,763 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:09:42,763 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:09:42,763 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:09:42,763 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:09:42,763 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:09:42,764 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:09:42,764 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:42,764 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:09:42,764 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:09:42,764 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:09:42,764 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:09:42,765 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:09:42,765 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:09:42,765 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:09:42,765 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:09:42,765 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:09:42,766 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 [2021-12-17 15:09:43,011 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:09:43,033 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:09:43,035 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:09:43,037 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:09:43,042 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:09:43,044 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2021-12-17 15:09:43,133 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b47529da9/002fa89ccb2543caa836103f5793dda6/FLAG09885dfc5 [2021-12-17 15:09:43,637 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:09:43,639 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2021-12-17 15:09:43,658 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b47529da9/002fa89ccb2543caa836103f5793dda6/FLAG09885dfc5 [2021-12-17 15:09:43,946 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b47529da9/002fa89ccb2543caa836103f5793dda6 [2021-12-17 15:09:43,950 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:09:43,953 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:09:43,961 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:43,961 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:09:43,966 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:09:43,970 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:43" (1/1) ... [2021-12-17 15:09:43,972 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@37a7b5e5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:43, skipping insertion in model container [2021-12-17 15:09:43,972 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:43" (1/1) ... [2021-12-17 15:09:43,987 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:09:44,050 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:09:44,410 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2021-12-17 15:09:44,425 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:44,435 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:09:44,489 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2021-12-17 15:09:44,495 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:44,507 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:09:44,508 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44 WrapperNode [2021-12-17 15:09:44,508 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:44,509 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:44,509 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:09:44,509 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:09:44,515 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,527 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,549 INFO L137 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 267 [2021-12-17 15:09:44,553 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:44,554 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:09:44,554 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:09:44,554 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:09:44,561 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,561 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,563 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,577 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,589 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,594 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,600 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,602 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:09:44,603 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:09:44,603 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:09:44,603 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:09:44,604 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (1/1) ... [2021-12-17 15:09:44,625 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:44,634 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:44,645 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:09:44,674 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:09:44,674 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:09:44,674 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:09:44,674 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:09:44,675 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:09:44,675 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:09:44,675 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:09:44,660 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:09:44,675 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:09:44,676 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:09:44,676 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:09:44,676 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:09:44,677 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-17 15:09:44,677 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-17 15:09:44,677 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-17 15:09:44,677 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-17 15:09:44,677 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:09:44,677 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:09:44,677 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:09:44,677 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:09:44,678 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:09:44,745 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:09:44,746 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:09:45,055 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:09:45,066 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:09:45,068 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:09:45,069 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:45 BoogieIcfgContainer [2021-12-17 15:09:45,070 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:09:45,073 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:09:45,073 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:09:45,075 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:09:45,076 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:09:43" (1/3) ... [2021-12-17 15:09:45,079 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4c881399 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:45, skipping insertion in model container [2021-12-17 15:09:45,079 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:44" (2/3) ... [2021-12-17 15:09:45,079 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4c881399 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:45, skipping insertion in model container [2021-12-17 15:09:45,080 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:45" (3/3) ... [2021-12-17 15:09:45,085 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product46.cil.c [2021-12-17 15:09:45,088 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:09:45,088 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:09:45,149 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:09:45,159 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:09:45,159 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:09:45,203 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-17 15:09:45,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:09:45,208 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:45,209 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:45,209 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:45,212 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:45,219 INFO L85 PathProgramCache]: Analyzing trace with hash -1607314381, now seen corresponding path program 1 times [2021-12-17 15:09:45,226 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:45,244 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1788798875] [2021-12-17 15:09:45,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:45,245 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:45,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:09:45,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:45,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,469 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:45,469 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:45,470 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1788798875] [2021-12-17 15:09:45,470 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1788798875] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:45,471 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:45,471 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:45,473 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1545660375] [2021-12-17 15:09:45,474 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:45,478 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:09:45,479 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:45,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:09:45,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:45,505 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:45,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:45,542 INFO L93 Difference]: Finished difference Result 189 states and 254 transitions. [2021-12-17 15:09:45,543 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:09:45,544 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-17 15:09:45,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:45,556 INFO L225 Difference]: With dead ends: 189 [2021-12-17 15:09:45,556 INFO L226 Difference]: Without dead ends: 90 [2021-12-17 15:09:45,559 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:45,562 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:45,563 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:45,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-12-17 15:09:45,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-12-17 15:09:45,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.2941176470588236) internal successors, (88), 75 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:09:45,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 115 transitions. [2021-12-17 15:09:45,611 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 115 transitions. Word has length 32 [2021-12-17 15:09:45,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:45,612 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 115 transitions. [2021-12-17 15:09:45,612 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:45,612 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 115 transitions. [2021-12-17 15:09:45,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-17 15:09:45,614 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:45,614 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:45,614 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:09:45,614 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:45,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:45,615 INFO L85 PathProgramCache]: Analyzing trace with hash -824221923, now seen corresponding path program 1 times [2021-12-17 15:09:45,615 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:45,616 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1636399883] [2021-12-17 15:09:45,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:45,616 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:45,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:09:45,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:09:45,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,675 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:45,675 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:45,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1636399883] [2021-12-17 15:09:45,675 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1636399883] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:45,675 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:45,676 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:45,676 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1962702896] [2021-12-17 15:09:45,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:45,677 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:45,677 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:45,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:45,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:45,678 INFO L87 Difference]: Start difference. First operand 90 states and 115 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:45,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:45,691 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2021-12-17 15:09:45,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:45,692 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-17 15:09:45,692 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:45,693 INFO L225 Difference]: With dead ends: 144 [2021-12-17 15:09:45,693 INFO L226 Difference]: Without dead ends: 81 [2021-12-17 15:09:45,694 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:45,696 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 13 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:45,696 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:45,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-17 15:09:45,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-17 15:09:45,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-17 15:09:45,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 103 transitions. [2021-12-17 15:09:45,706 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 103 transitions. Word has length 33 [2021-12-17 15:09:45,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:45,707 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 103 transitions. [2021-12-17 15:09:45,707 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:45,707 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2021-12-17 15:09:45,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-17 15:09:45,709 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:45,709 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:45,709 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:09:45,709 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:45,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:45,710 INFO L85 PathProgramCache]: Analyzing trace with hash 534456794, now seen corresponding path program 1 times [2021-12-17 15:09:45,710 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:45,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1601372543] [2021-12-17 15:09:45,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:45,712 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:45,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:45,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-17 15:09:45,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,785 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:45,786 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:45,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1601372543] [2021-12-17 15:09:45,786 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1601372543] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:45,786 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:45,786 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:45,787 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1194710952] [2021-12-17 15:09:45,787 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:45,787 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:45,787 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:45,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:45,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:45,788 INFO L87 Difference]: Start difference. First operand 81 states and 103 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:45,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:45,841 INFO L93 Difference]: Finished difference Result 154 states and 199 transitions. [2021-12-17 15:09:45,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:45,842 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-17 15:09:45,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:45,844 INFO L225 Difference]: With dead ends: 154 [2021-12-17 15:09:45,844 INFO L226 Difference]: Without dead ends: 81 [2021-12-17 15:09:45,845 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:45,846 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 126 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:45,846 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [126 Valid, 254 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:45,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-17 15:09:45,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-17 15:09:45,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-17 15:09:45,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 102 transitions. [2021-12-17 15:09:45,857 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 102 transitions. Word has length 38 [2021-12-17 15:09:45,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:45,858 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 102 transitions. [2021-12-17 15:09:45,859 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:45,859 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 102 transitions. [2021-12-17 15:09:45,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2021-12-17 15:09:45,882 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:45,882 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:45,882 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:09:45,883 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:45,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:45,883 INFO L85 PathProgramCache]: Analyzing trace with hash -216434858, now seen corresponding path program 1 times [2021-12-17 15:09:45,884 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:45,884 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1035434604] [2021-12-17 15:09:45,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:45,884 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:45,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:45,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:45,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:45,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-17 15:09:45,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:45,959 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:45,959 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:45,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1035434604] [2021-12-17 15:09:45,960 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1035434604] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:45,960 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:45,960 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:45,960 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [409320745] [2021-12-17 15:09:45,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:45,961 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:45,961 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:45,961 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:45,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:45,962 INFO L87 Difference]: Start difference. First operand 81 states and 102 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:46,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:46,132 INFO L93 Difference]: Finished difference Result 238 states and 300 transitions. [2021-12-17 15:09:46,133 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:46,133 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 48 [2021-12-17 15:09:46,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:46,140 INFO L225 Difference]: With dead ends: 238 [2021-12-17 15:09:46,140 INFO L226 Difference]: Without dead ends: 165 [2021-12-17 15:09:46,141 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:09:46,142 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 187 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 310 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:46,143 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 310 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:46,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2021-12-17 15:09:46,159 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2021-12-17 15:09:46,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 122 states have (on average 1.2540983606557377) internal successors, (153), 130 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-17 15:09:46,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 194 transitions. [2021-12-17 15:09:46,161 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 194 transitions. Word has length 48 [2021-12-17 15:09:46,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:46,162 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 194 transitions. [2021-12-17 15:09:46,162 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:46,162 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2021-12-17 15:09:46,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-12-17 15:09:46,163 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:46,163 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:46,176 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:09:46,177 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:46,177 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:46,177 INFO L85 PathProgramCache]: Analyzing trace with hash 1219044606, now seen corresponding path program 1 times [2021-12-17 15:09:46,177 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:46,177 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [821986059] [2021-12-17 15:09:46,178 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:46,178 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:46,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:46,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:46,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:46,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-17 15:09:46,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,279 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:09:46,279 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:46,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [821986059] [2021-12-17 15:09:46,279 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [821986059] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:46,280 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:46,280 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:09:46,280 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2005883405] [2021-12-17 15:09:46,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:46,282 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:09:46,282 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:46,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:09:46,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:46,283 INFO L87 Difference]: Start difference. First operand 159 states and 194 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-17 15:09:46,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:46,654 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2021-12-17 15:09:46,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-17 15:09:46,654 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 54 [2021-12-17 15:09:46,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:46,671 INFO L225 Difference]: With dead ends: 322 [2021-12-17 15:09:46,672 INFO L226 Difference]: Without dead ends: 171 [2021-12-17 15:09:46,674 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:09:46,683 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 120 mSDsluCounter, 353 mSDsCounter, 0 mSdLazyCounter, 205 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 455 SdHoareTripleChecker+Invalid, 240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 205 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:46,683 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [127 Valid, 455 Invalid, 240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 205 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:46,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2021-12-17 15:09:46,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 157. [2021-12-17 15:09:46,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.225) internal successors, (147), 128 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-17 15:09:46,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 188 transitions. [2021-12-17 15:09:46,719 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 188 transitions. Word has length 54 [2021-12-17 15:09:46,720 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:46,720 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 188 transitions. [2021-12-17 15:09:46,720 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-17 15:09:46,721 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 188 transitions. [2021-12-17 15:09:46,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-17 15:09:46,722 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:46,722 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:46,722 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:09:46,722 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:46,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:46,723 INFO L85 PathProgramCache]: Analyzing trace with hash 175038302, now seen corresponding path program 1 times [2021-12-17 15:09:46,723 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:46,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [386904513] [2021-12-17 15:09:46,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:46,723 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:46,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:46,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:46,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:46,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-17 15:09:46,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:46,811 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:46,812 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:46,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [386904513] [2021-12-17 15:09:46,812 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [386904513] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:46,813 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:46,813 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:46,813 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1786443352] [2021-12-17 15:09:46,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:46,813 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:46,814 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:46,814 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:46,814 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:46,815 INFO L87 Difference]: Start difference. First operand 157 states and 188 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:47,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:47,056 INFO L93 Difference]: Finished difference Result 316 states and 385 transitions. [2021-12-17 15:09:47,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:47,057 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2021-12-17 15:09:47,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:47,059 INFO L225 Difference]: With dead ends: 316 [2021-12-17 15:09:47,059 INFO L226 Difference]: Without dead ends: 167 [2021-12-17 15:09:47,060 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:47,062 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 69 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 368 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:47,063 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [74 Valid, 368 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:47,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2021-12-17 15:09:47,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 160. [2021-12-17 15:09:47,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 131 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-17 15:09:47,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 191 transitions. [2021-12-17 15:09:47,111 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 191 transitions. Word has length 60 [2021-12-17 15:09:47,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:47,113 INFO L470 AbstractCegarLoop]: Abstraction has 160 states and 191 transitions. [2021-12-17 15:09:47,113 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:47,113 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 191 transitions. [2021-12-17 15:09:47,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-17 15:09:47,114 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:47,114 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:47,115 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:09:47,115 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:47,115 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:47,115 INFO L85 PathProgramCache]: Analyzing trace with hash 2098266336, now seen corresponding path program 1 times [2021-12-17 15:09:47,116 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:47,116 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [107291820] [2021-12-17 15:09:47,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:47,116 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:47,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:47,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:47,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:47,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-17 15:09:47,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,224 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:47,224 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:47,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [107291820] [2021-12-17 15:09:47,224 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [107291820] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:47,225 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:47,225 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:47,225 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1290346565] [2021-12-17 15:09:47,225 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:47,225 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:47,226 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:47,226 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:47,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:47,229 INFO L87 Difference]: Start difference. First operand 160 states and 191 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:47,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:47,367 INFO L93 Difference]: Finished difference Result 322 states and 391 transitions. [2021-12-17 15:09:47,367 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:47,368 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2021-12-17 15:09:47,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:47,369 INFO L225 Difference]: With dead ends: 322 [2021-12-17 15:09:47,370 INFO L226 Difference]: Without dead ends: 170 [2021-12-17 15:09:47,372 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:47,374 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 70 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:47,375 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 291 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:47,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2021-12-17 15:09:47,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 162. [2021-12-17 15:09:47,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 125 states have (on average 1.216) internal successors, (152), 133 states have internal predecessors, (152), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-17 15:09:47,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 193 transitions. [2021-12-17 15:09:47,395 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 193 transitions. Word has length 60 [2021-12-17 15:09:47,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:47,396 INFO L470 AbstractCegarLoop]: Abstraction has 162 states and 193 transitions. [2021-12-17 15:09:47,396 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:47,396 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 193 transitions. [2021-12-17 15:09:47,397 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-17 15:09:47,397 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:47,397 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:47,397 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:09:47,397 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:47,397 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:47,398 INFO L85 PathProgramCache]: Analyzing trace with hash -810497566, now seen corresponding path program 1 times [2021-12-17 15:09:47,398 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:47,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1963852522] [2021-12-17 15:09:47,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:47,398 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:47,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:47,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:47,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:47,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-17 15:09:47,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,512 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:47,512 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:47,513 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1963852522] [2021-12-17 15:09:47,513 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1963852522] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:47,513 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:47,513 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:47,513 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [710975564] [2021-12-17 15:09:47,513 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:47,513 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:47,513 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:47,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:47,514 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:47,514 INFO L87 Difference]: Start difference. First operand 162 states and 193 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:47,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:47,711 INFO L93 Difference]: Finished difference Result 448 states and 559 transitions. [2021-12-17 15:09:47,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:47,711 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2021-12-17 15:09:47,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:47,713 INFO L225 Difference]: With dead ends: 448 [2021-12-17 15:09:47,713 INFO L226 Difference]: Without dead ends: 294 [2021-12-17 15:09:47,714 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:47,714 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 216 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:47,714 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [224 Valid, 313 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:47,715 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2021-12-17 15:09:47,727 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 292. [2021-12-17 15:09:47,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 223 states have (on average 1.201793721973094) internal successors, (268), 235 states have internal predecessors, (268), 36 states have call successors, (36), 31 states have call predecessors, (36), 32 states have return successors, (51), 36 states have call predecessors, (51), 36 states have call successors, (51) [2021-12-17 15:09:47,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 355 transitions. [2021-12-17 15:09:47,729 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 355 transitions. Word has length 60 [2021-12-17 15:09:47,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:47,729 INFO L470 AbstractCegarLoop]: Abstraction has 292 states and 355 transitions. [2021-12-17 15:09:47,729 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:47,729 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 355 transitions. [2021-12-17 15:09:47,730 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-17 15:09:47,730 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:47,730 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:47,730 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:09:47,730 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:47,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:47,731 INFO L85 PathProgramCache]: Analyzing trace with hash -1779897540, now seen corresponding path program 1 times [2021-12-17 15:09:47,731 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:47,731 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1978188778] [2021-12-17 15:09:47,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:47,731 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:47,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:47,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:09:47,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-17 15:09:47,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:47,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-17 15:09:47,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:47,893 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:47,893 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:47,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1978188778] [2021-12-17 15:09:47,893 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1978188778] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:47,893 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:47,893 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-17 15:09:47,894 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2092496020] [2021-12-17 15:09:47,894 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:47,894 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-17 15:09:47,894 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:47,895 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-17 15:09:47,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:47,895 INFO L87 Difference]: Start difference. First operand 292 states and 355 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:48,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:48,520 INFO L93 Difference]: Finished difference Result 749 states and 945 transitions. [2021-12-17 15:09:48,520 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2021-12-17 15:09:48,520 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2021-12-17 15:09:48,520 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:48,523 INFO L225 Difference]: With dead ends: 749 [2021-12-17 15:09:48,524 INFO L226 Difference]: Without dead ends: 516 [2021-12-17 15:09:48,525 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 179 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=201, Invalid=611, Unknown=0, NotChecked=0, Total=812 [2021-12-17 15:09:48,526 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 660 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 465 mSolverCounterSat, 229 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 665 SdHoareTripleChecker+Valid, 551 SdHoareTripleChecker+Invalid, 694 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 229 IncrementalHoareTripleChecker+Valid, 465 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:48,526 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [665 Valid, 551 Invalid, 694 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [229 Valid, 465 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-17 15:09:48,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 516 states. [2021-12-17 15:09:48,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 516 to 436. [2021-12-17 15:09:48,581 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 436 states, 333 states have (on average 1.1891891891891893) internal successors, (396), 352 states have internal predecessors, (396), 53 states have call successors, (53), 44 states have call predecessors, (53), 49 states have return successors, (72), 52 states have call predecessors, (72), 53 states have call successors, (72) [2021-12-17 15:09:48,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 436 states to 436 states and 521 transitions. [2021-12-17 15:09:48,583 INFO L78 Accepts]: Start accepts. Automaton has 436 states and 521 transitions. Word has length 64 [2021-12-17 15:09:48,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:48,584 INFO L470 AbstractCegarLoop]: Abstraction has 436 states and 521 transitions. [2021-12-17 15:09:48,584 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:48,584 INFO L276 IsEmpty]: Start isEmpty. Operand 436 states and 521 transitions. [2021-12-17 15:09:48,585 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2021-12-17 15:09:48,585 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:48,585 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:48,586 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:09:48,586 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:48,586 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:48,586 INFO L85 PathProgramCache]: Analyzing trace with hash 2079059227, now seen corresponding path program 1 times [2021-12-17 15:09:48,586 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:48,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1972466655] [2021-12-17 15:09:48,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:48,586 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:48,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:48,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:09:48,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:48,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:48,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:48,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-17 15:09:48,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-17 15:09:48,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-17 15:09:48,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:48,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-17 15:09:48,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,738 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-17 15:09:48,738 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:48,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1972466655] [2021-12-17 15:09:48,739 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1972466655] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:48,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1890503499] [2021-12-17 15:09:48,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:48,739 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:48,739 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:48,741 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:48,764 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:09:48,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:48,891 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:09:48,898 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:49,173 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:49,173 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:49,436 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-17 15:09:49,436 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1890503499] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:49,436 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:49,437 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-12-17 15:09:49,437 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1044712119] [2021-12-17 15:09:49,437 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:49,437 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-12-17 15:09:49,437 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:49,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-12-17 15:09:49,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-12-17 15:09:49,438 INFO L87 Difference]: Start difference. First operand 436 states and 521 transitions. Second operand has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2021-12-17 15:09:50,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:50,255 INFO L93 Difference]: Finished difference Result 915 states and 1116 transitions. [2021-12-17 15:09:50,255 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-17 15:09:50,256 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) Word has length 108 [2021-12-17 15:09:50,256 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:50,256 INFO L225 Difference]: With dead ends: 915 [2021-12-17 15:09:50,256 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:09:50,258 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 282 GetRequests, 243 SyntacticMatches, 1 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 336 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=275, Invalid=1285, Unknown=0, NotChecked=0, Total=1560 [2021-12-17 15:09:50,259 INFO L933 BasicCegarLoop]: 221 mSDtfsCounter, 371 mSDsluCounter, 1441 mSDsCounter, 0 mSdLazyCounter, 1354 mSolverCounterSat, 149 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 372 SdHoareTripleChecker+Valid, 1662 SdHoareTripleChecker+Invalid, 1503 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 149 IncrementalHoareTripleChecker+Valid, 1354 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:50,259 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [372 Valid, 1662 Invalid, 1503 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [149 Valid, 1354 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-17 15:09:50,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:09:50,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:09:50,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:50,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:09:50,260 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 108 [2021-12-17 15:09:50,260 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:50,261 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:09:50,261 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2021-12-17 15:09:50,261 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:09:50,261 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:09:50,263 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:09:50,292 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:50,483 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:09:50,485 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:09:53,917 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 748 754) no Hoare annotation was computed. [2021-12-17 15:09:53,917 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 748 754) the Hoare annotation is: true [2021-12-17 15:09:53,917 INFO L858 garLoopResultBuilder]: For program point L607-1(lines 603 614) no Hoare annotation was computed. [2021-12-17 15:09:53,917 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 603 614) the Hoare annotation is: true [2021-12-17 15:09:53,918 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 603 614) no Hoare annotation was computed. [2021-12-17 15:09:53,918 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-12-17 15:09:53,918 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 721 747) no Hoare annotation was computed. [2021-12-17 15:09:53,918 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 .cse4) .cse5) (or .cse0 .cse1 (and .cse3 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 .cse4 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse5))) [2021-12-17 15:09:53,918 INFO L854 garLoopResultBuilder]: At program point L837(lines 832 839) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 (<= ~waterLevel~0 2) .cse3) .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,918 INFO L854 garLoopResultBuilder]: At program point L796(line 796) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,918 INFO L854 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,919 INFO L858 garLoopResultBuilder]: For program point L788-1(line 788) no Hoare annotation was computed. [2021-12-17 15:09:53,919 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (and (= ~waterLevel~0 |old(~waterLevel~0)|) .cse2) .cse3) (let ((.cse6 (= ~waterLevel~0 1))) (or .cse4 .cse0 .cse1 (and .cse5 .cse6 .cse7) (and .cse5 .cse6 .cse2) .cse8)) (let ((.cse9 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse5 .cse7 .cse9) (and .cse5 .cse9 .cse2) .cse8)) (or .cse4 .cse0 .cse1 .cse3))) [2021-12-17 15:09:53,919 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-12-17 15:09:53,919 INFO L854 garLoopResultBuilder]: At program point L652(lines 647 655) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (let ((.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse2 (and .cse1 .cse3) .cse4)) (let ((.cse7 (= ~waterLevel~0 1))) (or .cse5 .cse0 .cse2 (and .cse6 .cse7 .cse8) (and .cse6 .cse7 .cse3) .cse9)) (let ((.cse10 (<= ~waterLevel~0 2))) (or .cse0 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse6 .cse8 .cse10) (and .cse6 .cse10 .cse3) .cse9)) (or .cse5 .cse0 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse2 .cse4))) [2021-12-17 15:09:53,919 INFO L858 garLoopResultBuilder]: For program point L710(line 710) no Hoare annotation was computed. [2021-12-17 15:09:53,919 INFO L854 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2))) [2021-12-17 15:09:53,919 INFO L854 garLoopResultBuilder]: At program point L801-1(lines 782 806) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|)))) (and (let ((.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse2 (and .cse1 .cse3) (not (= |old(~pumpRunning~0)| 0)))) (let ((.cse5 (= ~waterLevel~0 1))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse2 (and .cse4 .cse5 .cse6) (and .cse4 .cse5 .cse3) .cse7)) (let ((.cse8 (<= ~waterLevel~0 2))) (or .cse0 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse4 .cse6 .cse8) (and .cse4 .cse8 .cse3) .cse7)))) [2021-12-17 15:09:53,919 INFO L858 garLoopResultBuilder]: For program point L735-1(lines 735 741) no Hoare annotation was computed. [2021-12-17 15:09:53,919 INFO L858 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2021-12-17 15:09:53,919 INFO L854 garLoopResultBuilder]: At program point L711(lines 706 713) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2))) [2021-12-17 15:09:53,919 INFO L854 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,920 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 .cse4) .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse3 .cse4 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse5) (or .cse0 .cse1 (and .cse2 .cse4 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point L728(lines 728 734) no Hoare annotation was computed. [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point L728-2(lines 724 746) no Hoare annotation was computed. [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point L790(lines 790 798) no Hoare annotation was computed. [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point L786(lines 786 803) no Hoare annotation was computed. [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-12-17 15:09:53,920 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 721 747) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse3 .cse4) .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse3 .cse4 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse5) (or .cse0 .cse1 (and .cse2 .cse4 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,920 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (let ((.cse5 (= ~pumpRunning~0 0)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not .cse1)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (= |old(~pumpRunning~0)| 0)))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6 (and .cse2 .cse3 .cse7 .cse4) .cse8)) (let ((.cse9 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 (and .cse9 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse6 (and .cse9 .cse7) .cse10)) (let ((.cse11 (<= ~waterLevel~0 2))) (or .cse1 .cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) (and .cse2 .cse11 .cse4 .cse5) (and .cse2 .cse7 .cse11 .cse4) .cse8)) (or .cse0 .cse1 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) .cse6 .cse10)))) [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 721 747) no Hoare annotation was computed. [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 710) no Hoare annotation was computed. [2021-12-17 15:09:53,920 INFO L861 garLoopResultBuilder]: At program point L129(lines 104 133) the Hoare annotation is: true [2021-12-17 15:09:53,920 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 104 133) no Hoare annotation was computed. [2021-12-17 15:09:53,921 INFO L858 garLoopResultBuilder]: For program point L125(line 125) no Hoare annotation was computed. [2021-12-17 15:09:53,921 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 104 133) the Hoare annotation is: true [2021-12-17 15:09:53,921 INFO L858 garLoopResultBuilder]: For program point L118(lines 118 122) no Hoare annotation was computed. [2021-12-17 15:09:53,921 INFO L861 garLoopResultBuilder]: At program point L118-1(lines 118 122) the Hoare annotation is: true [2021-12-17 15:09:53,921 INFO L858 garLoopResultBuilder]: For program point L115(line 115) no Hoare annotation was computed. [2021-12-17 15:09:53,921 INFO L861 garLoopResultBuilder]: At program point L114-2(lines 114 128) the Hoare annotation is: true [2021-12-17 15:09:53,921 INFO L861 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: true [2021-12-17 15:09:53,921 INFO L858 garLoopResultBuilder]: For program point L110-1(line 110) no Hoare annotation was computed. [2021-12-17 15:09:53,921 INFO L854 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 1 |ULTIMATE.start_main_~tmp~1#1|)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 0)) (and .cse0 .cse1 .cse5 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse5 .cse2 .cse3 .cse4))) [2021-12-17 15:09:53,921 INFO L861 garLoopResultBuilder]: At program point L985(lines 924 989) the Hoare annotation is: true [2021-12-17 15:09:53,921 INFO L858 garLoopResultBuilder]: For program point L944(lines 944 950) no Hoare annotation was computed. [2021-12-17 15:09:53,921 INFO L858 garLoopResultBuilder]: For program point L944-1(lines 944 950) no Hoare annotation was computed. [2021-12-17 15:09:53,921 INFO L858 garLoopResultBuilder]: For program point L936(lines 936 940) no Hoare annotation was computed. [2021-12-17 15:09:53,921 INFO L858 garLoopResultBuilder]: For program point L193(lines 193 200) no Hoare annotation was computed. [2021-12-17 15:09:53,921 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:09:53,922 INFO L858 garLoopResultBuilder]: For program point L193-2(lines 193 200) no Hoare annotation was computed. [2021-12-17 15:09:53,922 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:09:53,922 INFO L854 garLoopResultBuilder]: At program point L701(lines 696 704) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:53,922 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:09:53,922 INFO L854 garLoopResultBuilder]: At program point L920(lines 915 922) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 1 |ULTIMATE.start_main_~tmp~1#1|)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 0)) (and .cse0 .cse1 .cse5 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse5 .cse2 .cse3 .cse4))) [2021-12-17 15:09:53,922 INFO L854 garLoopResultBuilder]: At program point L982(lines 933 983) the Hoare annotation is: false [2021-12-17 15:09:53,922 INFO L854 garLoopResultBuilder]: At program point L693(lines 689 695) the Hoare annotation is: (and (= ~waterLevel~0 1) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:53,922 INFO L861 garLoopResultBuilder]: At program point L177(lines 169 179) the Hoare annotation is: true [2021-12-17 15:09:53,922 INFO L861 garLoopResultBuilder]: At program point L202(lines 183 205) the Hoare annotation is: true [2021-12-17 15:09:53,922 INFO L854 garLoopResultBuilder]: At program point L165(lines 161 167) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= 1 |ULTIMATE.start_main_~tmp~1#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:53,922 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:09:53,922 INFO L858 garLoopResultBuilder]: For program point L954(lines 954 960) no Hoare annotation was computed. [2021-12-17 15:09:53,922 INFO L858 garLoopResultBuilder]: For program point L954-1(lines 954 960) no Hoare annotation was computed. [2021-12-17 15:09:53,923 INFO L854 garLoopResultBuilder]: At program point L979(lines 934 981) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 1 |ULTIMATE.start_main_~tmp~1#1|)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 0)) (and .cse0 .cse1 .cse5 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse5 .cse2 .cse3 .cse4))) [2021-12-17 15:09:53,923 INFO L854 garLoopResultBuilder]: At program point L946(line 946) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 1 |ULTIMATE.start_main_~tmp~1#1|)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 0)) (and .cse0 .cse1 .cse5 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse5 .cse2 .cse3 .cse4))) [2021-12-17 15:09:53,923 INFO L854 garLoopResultBuilder]: At program point L686(lines 682 688) the Hoare annotation is: (and (= ~waterLevel~0 1) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:53,923 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= 1 |ULTIMATE.start_main_~tmp~1#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:09:53,923 INFO L858 garLoopResultBuilder]: For program point L972(lines 972 976) no Hoare annotation was computed. [2021-12-17 15:09:53,923 INFO L854 garLoopResultBuilder]: At program point L972-2(lines 964 977) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 1 |ULTIMATE.start_main_~tmp~1#1|)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 0)) (and .cse0 .cse1 .cse5 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse5 .cse2 .cse3 .cse4))) [2021-12-17 15:09:53,923 INFO L858 garLoopResultBuilder]: For program point L935(lines 934 981) no Hoare annotation was computed. [2021-12-17 15:09:53,923 INFO L858 garLoopResultBuilder]: For program point L964(lines 964 977) no Hoare annotation was computed. [2021-12-17 15:09:53,923 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 591 602) no Hoare annotation was computed. [2021-12-17 15:09:53,923 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 591 602) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse2) (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (= ~pumpRunning~0 0)) .cse3))) [2021-12-17 15:09:53,923 INFO L858 garLoopResultBuilder]: For program point L595-1(lines 591 602) no Hoare annotation was computed. [2021-12-17 15:09:53,923 INFO L858 garLoopResultBuilder]: For program point L764(lines 764 772) no Hoare annotation was computed. [2021-12-17 15:09:53,923 INFO L854 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (and (<= 2 ~waterLevel~0) .cse2) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse2))))) [2021-12-17 15:09:53,924 INFO L858 garLoopResultBuilder]: For program point L760(lines 760 777) no Hoare annotation was computed. [2021-12-17 15:09:53,924 INFO L858 garLoopResultBuilder]: For program point L822(lines 822 828) no Hoare annotation was computed. [2021-12-17 15:09:53,924 INFO L854 garLoopResultBuilder]: At program point L820(line 820) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 0)) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,924 INFO L854 garLoopResultBuilder]: At program point L822-2(lines 815 831) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse2 (<= 2 ~waterLevel~0))) (or (and .cse2 (= ~pumpRunning~0 0)) .cse0 (and (<= 1 ~pumpRunning~0) .cse2) .cse1 (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-17 15:09:53,924 INFO L858 garLoopResultBuilder]: For program point L820-1(line 820) no Hoare annotation was computed. [2021-12-17 15:09:53,924 INFO L854 garLoopResultBuilder]: At program point L911(lines 896 914) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (and (<= 2 ~waterLevel~0) .cse2) .cse0 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0) .cse2) .cse1 (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-17 15:09:53,924 INFO L854 garLoopResultBuilder]: At program point L812(lines 807 814) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,924 INFO L858 garLoopResultBuilder]: For program point L905(lines 905 909) no Hoare annotation was computed. [2021-12-17 15:09:53,924 INFO L858 garLoopResultBuilder]: For program point L905-2(lines 905 909) no Hoare annotation was computed. [2021-12-17 15:09:53,924 INFO L854 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,924 INFO L858 garLoopResultBuilder]: For program point L775-1(lines 756 780) no Hoare annotation was computed. [2021-12-17 15:09:53,924 INFO L858 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2021-12-17 15:09:53,924 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 756 780) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:09:53,925 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 756 780) no Hoare annotation was computed. [2021-12-17 15:09:53,925 INFO L854 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (and (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0) (= ~pumpRunning~0 0)) .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:09:53,925 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 851 859) no Hoare annotation was computed. [2021-12-17 15:09:53,925 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 851 859) the Hoare annotation is: true [2021-12-17 15:09:53,925 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 851 859) no Hoare annotation was computed. [2021-12-17 15:09:53,925 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 840 850) the Hoare annotation is: true [2021-12-17 15:09:53,925 INFO L861 garLoopResultBuilder]: At program point L620(lines 615 623) the Hoare annotation is: true [2021-12-17 15:09:53,925 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 840 850) no Hoare annotation was computed. [2021-12-17 15:09:53,925 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 840 850) no Hoare annotation was computed. [2021-12-17 15:09:53,928 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:53,929 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:09:53,952 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:09:53 BoogieIcfgContainer [2021-12-17 15:09:53,953 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:09:53,953 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:09:53,953 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:09:53,953 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:09:53,954 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:45" (3/4) ... [2021-12-17 15:09:53,959 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:09:53,964 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:09:53,964 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:09:53,964 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:09:53,964 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:09:53,965 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:09:53,965 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:09:53,965 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-17 15:09:53,965 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-17 15:09:53,971 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-12-17 15:09:53,972 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:09:53,972 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:09:53,972 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:09:53,972 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:09:53,973 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:09:53,973 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:09:53,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((waterLevel == 1 && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-17 15:09:53,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && 1 == \result) && 1 == tmp) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-17 15:09:53,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && 1 == \result) && 1 == tmp) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-17 15:09:53,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((splverifierCounter == 0 && 1 == \result) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == \result) && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive)) [2021-12-17 15:09:53,993 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:09:53,993 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning)))) && ((0 == systemActive || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:53,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((splverifierCounter == 0 && 1 == \result) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == \result) && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive)) [2021-12-17 15:09:53,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && !(0 == systemActive)) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) && ((((0 == systemActive || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel <= 2) && !(0 == systemActive)) && pumpRunning == 0)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2) && !(0 == systemActive))) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:53,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:09:53,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:09:53,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == systemActive || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:53,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((0 == systemActive || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:53,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || (1 <= \result && pumpRunning == 0)) [2021-12-17 15:09:53,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:53,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:53,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || ((tmp___0 == 0 && \result == 0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:09:54,016 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:09:54,016 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:09:54,017 INFO L158 Benchmark]: Toolchain (without parser) took 10063.99ms. Allocated memory was 113.2MB in the beginning and 163.6MB in the end (delta: 50.3MB). Free memory was 79.1MB in the beginning and 112.9MB in the end (delta: -33.8MB). Peak memory consumption was 17.3MB. Max. memory is 16.1GB. [2021-12-17 15:09:54,017 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 81.8MB. Free memory was 52.5MB in the beginning and 52.5MB in the end (delta: 18.4kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:09:54,017 INFO L158 Benchmark]: CACSL2BoogieTranslator took 547.22ms. Allocated memory is still 113.2MB. Free memory was 78.9MB in the beginning and 82.0MB in the end (delta: -3.2MB). Peak memory consumption was 12.3MB. Max. memory is 16.1GB. [2021-12-17 15:09:54,017 INFO L158 Benchmark]: Boogie Procedure Inliner took 44.72ms. Allocated memory is still 113.2MB. Free memory was 82.0MB in the beginning and 79.2MB in the end (delta: 2.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:09:54,018 INFO L158 Benchmark]: Boogie Preprocessor took 48.04ms. Allocated memory is still 113.2MB. Free memory was 79.2MB in the beginning and 77.8MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:09:54,018 INFO L158 Benchmark]: RCFGBuilder took 467.48ms. Allocated memory is still 113.2MB. Free memory was 77.8MB in the beginning and 61.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-17 15:09:54,018 INFO L158 Benchmark]: TraceAbstraction took 8879.73ms. Allocated memory was 113.2MB in the beginning and 163.6MB in the end (delta: 50.3MB). Free memory was 60.4MB in the beginning and 120.2MB in the end (delta: -59.8MB). Peak memory consumption was 68.3MB. Max. memory is 16.1GB. [2021-12-17 15:09:54,018 INFO L158 Benchmark]: Witness Printer took 63.17ms. Allocated memory is still 163.6MB. Free memory was 120.2MB in the beginning and 112.9MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:09:54,020 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 81.8MB. Free memory was 52.5MB in the beginning and 52.5MB in the end (delta: 18.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 547.22ms. Allocated memory is still 113.2MB. Free memory was 78.9MB in the beginning and 82.0MB in the end (delta: -3.2MB). Peak memory consumption was 12.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 44.72ms. Allocated memory is still 113.2MB. Free memory was 82.0MB in the beginning and 79.2MB in the end (delta: 2.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 48.04ms. Allocated memory is still 113.2MB. Free memory was 79.2MB in the beginning and 77.8MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 467.48ms. Allocated memory is still 113.2MB. Free memory was 77.8MB in the beginning and 61.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 8879.73ms. Allocated memory was 113.2MB in the beginning and 163.6MB in the end (delta: 50.3MB). Free memory was 60.4MB in the beginning and 120.2MB in the end (delta: -59.8MB). Peak memory consumption was 68.3MB. Max. memory is 16.1GB. * Witness Printer took 63.17ms. Allocated memory is still 163.6MB. Free memory was 120.2MB in the beginning and 112.9MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 710]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.8s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1870 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1832 mSDsluCounter, 4515 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3273 mSDsCounter, 584 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2480 IncrementalHoareTripleChecker+Invalid, 3064 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 584 mSolverCounterUnsat, 1242 mSDtfsCounter, 2480 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 439 GetRequests, 329 SyntacticMatches, 2 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 547 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=436occurred in iteration=9, InterpolantAutomatonStates: 102, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 117 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 982 PreInvPairs, 1183 NumberOfFragments, 1854 HoareAnnotationTreeSize, 982 FomulaSimplifications, 813 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 46 FomulaSimplificationsInter, 8692 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 665 NumberOfCodeBlocks, 665 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 761 ConstructedInterpolants, 0 QuantifiedInterpolants, 1502 SizeOfPredicates, 3 NumberOfNonLiveVariables, 501 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 115/141 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && 1 == \result) && 1 == tmp) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 933]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((0 == systemActive || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning)))) && ((0 == systemActive || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && 1 == \result) && 1 == tmp) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((((((splverifierCounter == 0 && 1 == \result) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == \result) && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive)) - InvariantResult [Line: 183]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 647]: Loop Invariant Derived loop invariant: ((((((0 == systemActive || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: (waterLevel == 1 && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: ((((((splverifierCounter == 0 && 1 == \result) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == \result) && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && 1 == tmp) && !(0 == systemActive)) - InvariantResult [Line: 696]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: (((((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && !(0 == systemActive)) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) && ((((0 == systemActive || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel <= 2) && !(0 == systemActive)) && pumpRunning == 0)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2) && !(0 == systemActive))) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 807]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || ((tmp___0 == 0 && \result == 0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: (waterLevel == 1 && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: (((((0 == systemActive || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) RESULT: Ultimate proved your program to be correct! [2021-12-17 15:09:54,076 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE