./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 88f09ec5af0f641c9edfe2f7047937341e46c7f8baabeed0fd38f069cd3b5278 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:09:52,314 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:09:52,315 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:09:52,343 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:09:52,345 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:09:52,350 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:09:52,352 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:09:52,356 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:09:52,358 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:09:52,362 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:09:52,362 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:09:52,363 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:09:52,364 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:09:52,366 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:09:52,367 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:09:52,369 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:09:52,371 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:09:52,371 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:09:52,373 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:09:52,376 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:09:52,378 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:09:52,379 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:09:52,380 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:09:52,381 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:09:52,384 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:09:52,386 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:09:52,387 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:09:52,387 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:09:52,388 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:09:52,389 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:09:52,389 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:09:52,390 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:09:52,391 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:09:52,391 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:09:52,392 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:09:52,393 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:09:52,393 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:09:52,394 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:09:52,394 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:09:52,394 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:09:52,395 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:09:52,396 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:09:52,415 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:09:52,420 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:09:52,421 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:09:52,421 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:09:52,422 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:09:52,422 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:09:52,422 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:09:52,423 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:09:52,423 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:09:52,423 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:09:52,424 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:09:52,424 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:09:52,424 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:09:52,424 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:09:52,424 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:09:52,424 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:09:52,424 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:09:52,425 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:09:52,425 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:09:52,425 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:09:52,425 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:09:52,425 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:09:52,425 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:09:52,426 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:09:52,426 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:52,426 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:09:52,426 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:09:52,426 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:09:52,426 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:09:52,426 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:09:52,427 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:09:52,427 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:09:52,427 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:09:52,427 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:09:52,427 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 88f09ec5af0f641c9edfe2f7047937341e46c7f8baabeed0fd38f069cd3b5278 [2021-12-17 15:09:52,650 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:09:52,664 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:09:52,666 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:09:52,667 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:09:52,679 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:09:52,680 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c [2021-12-17 15:09:52,732 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b54c65d3b/75fbcb9eddc747b2a5669717259d2bf7/FLAGed764ad11 [2021-12-17 15:09:53,081 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:09:53,082 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c [2021-12-17 15:09:53,092 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b54c65d3b/75fbcb9eddc747b2a5669717259d2bf7/FLAGed764ad11 [2021-12-17 15:09:53,461 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b54c65d3b/75fbcb9eddc747b2a5669717259d2bf7 [2021-12-17 15:09:53,463 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:09:53,464 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:09:53,465 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:53,465 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:09:53,467 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:09:53,468 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,468 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3bfc15bd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53, skipping insertion in model container [2021-12-17 15:09:53,469 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,473 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:09:53,500 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:09:53,668 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c[3971,3984] [2021-12-17 15:09:53,758 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:53,767 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:09:53,794 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product54.cil.c[3971,3984] [2021-12-17 15:09:53,819 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:53,830 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:09:53,831 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53 WrapperNode [2021-12-17 15:09:53,831 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:53,832 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:53,832 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:09:53,832 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:09:53,836 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,847 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,864 INFO L137 Inliner]: procedures = 59, calls = 162, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 289 [2021-12-17 15:09:53,864 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:53,865 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:09:53,865 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:09:53,865 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:09:53,870 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,871 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,873 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,873 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,877 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,880 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,881 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,883 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:09:53,884 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:09:53,884 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:09:53,884 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:09:53,885 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (1/1) ... [2021-12-17 15:09:53,893 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:53,902 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:53,923 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:09:53,925 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:09:53,956 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:09:53,956 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:09:53,956 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:09:53,956 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:09:53,956 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:09:53,957 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:09:53,957 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:09:53,957 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:53,957 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:53,958 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:09:53,958 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:09:53,958 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:09:53,958 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:09:53,958 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-17 15:09:53,959 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-17 15:09:53,959 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:09:53,959 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:09:53,959 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:09:53,959 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:09:53,959 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:09:53,959 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:09:53,960 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:09:54,044 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:09:54,046 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:09:54,355 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:09:54,359 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:09:54,363 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:09:54,365 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:54 BoogieIcfgContainer [2021-12-17 15:09:54,365 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:09:54,366 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:09:54,366 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:09:54,369 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:09:54,369 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:09:53" (1/3) ... [2021-12-17 15:09:54,370 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f1cfcd6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:54, skipping insertion in model container [2021-12-17 15:09:54,370 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:53" (2/3) ... [2021-12-17 15:09:54,370 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f1cfcd6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:54, skipping insertion in model container [2021-12-17 15:09:54,370 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:54" (3/3) ... [2021-12-17 15:09:54,371 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product54.cil.c [2021-12-17 15:09:54,375 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:09:54,375 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:09:54,405 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:09:54,409 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:09:54,409 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:09:54,420 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 89 states have internal predecessors, (108), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:09:54,424 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:09:54,425 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,425 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,425 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,428 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,429 INFO L85 PathProgramCache]: Analyzing trace with hash -17930075, now seen corresponding path program 1 times [2021-12-17 15:09:54,434 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1914580481] [2021-12-17 15:09:54,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,435 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:54,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:09:54,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:54,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,581 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:54,582 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:54,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1914580481] [2021-12-17 15:09:54,583 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1914580481] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:54,583 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:54,583 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:54,584 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [932631961] [2021-12-17 15:09:54,585 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:54,587 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:09:54,587 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:54,607 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:09:54,608 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:54,611 INFO L87 Difference]: Start difference. First operand has 106 states, 79 states have (on average 1.3670886075949367) internal successors, (108), 89 states have internal predecessors, (108), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:54,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:54,651 INFO L93 Difference]: Finished difference Result 203 states and 274 transitions. [2021-12-17 15:09:54,652 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:09:54,653 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-17 15:09:54,653 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:54,663 INFO L225 Difference]: With dead ends: 203 [2021-12-17 15:09:54,663 INFO L226 Difference]: Without dead ends: 97 [2021-12-17 15:09:54,668 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:54,671 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:54,671 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:54,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2021-12-17 15:09:54,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2021-12-17 15:09:54,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 72 states have (on average 1.3055555555555556) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-17 15:09:54,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 125 transitions. [2021-12-17 15:09:54,712 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 125 transitions. Word has length 32 [2021-12-17 15:09:54,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:54,713 INFO L470 AbstractCegarLoop]: Abstraction has 97 states and 125 transitions. [2021-12-17 15:09:54,713 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:54,713 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 125 transitions. [2021-12-17 15:09:54,720 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-17 15:09:54,721 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,721 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,722 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:09:54,722 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,723 INFO L85 PathProgramCache]: Analyzing trace with hash 1323382524, now seen corresponding path program 1 times [2021-12-17 15:09:54,723 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [183930705] [2021-12-17 15:09:54,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,724 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:54,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:09:54,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:09:54,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,813 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:54,813 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:54,814 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [183930705] [2021-12-17 15:09:54,814 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [183930705] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:54,814 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:54,814 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:54,814 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1486093621] [2021-12-17 15:09:54,814 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:54,815 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:54,815 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:54,816 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:54,817 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:54,817 INFO L87 Difference]: Start difference. First operand 97 states and 125 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:54,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:54,834 INFO L93 Difference]: Finished difference Result 158 states and 204 transitions. [2021-12-17 15:09:54,834 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:54,834 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-17 15:09:54,835 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:54,841 INFO L225 Difference]: With dead ends: 158 [2021-12-17 15:09:54,841 INFO L226 Difference]: Without dead ends: 88 [2021-12-17 15:09:54,843 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:54,845 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 13 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:54,847 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 207 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:54,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2021-12-17 15:09:54,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2021-12-17 15:09:54,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 75 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:09:54,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 113 transitions. [2021-12-17 15:09:54,855 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 113 transitions. Word has length 33 [2021-12-17 15:09:54,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:54,855 INFO L470 AbstractCegarLoop]: Abstraction has 88 states and 113 transitions. [2021-12-17 15:09:54,855 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:54,855 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 113 transitions. [2021-12-17 15:09:54,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-17 15:09:54,856 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,856 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,856 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:09:54,857 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,857 INFO L85 PathProgramCache]: Analyzing trace with hash 951919944, now seen corresponding path program 1 times [2021-12-17 15:09:54,857 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,858 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2142022333] [2021-12-17 15:09:54,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,858 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:54,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:54,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-17 15:09:54,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,929 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:54,929 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:54,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2142022333] [2021-12-17 15:09:54,929 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2142022333] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:54,931 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:54,931 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:54,931 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2086311667] [2021-12-17 15:09:54,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:54,932 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:54,932 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:54,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:54,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:54,933 INFO L87 Difference]: Start difference. First operand 88 states and 113 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:54,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:54,964 INFO L93 Difference]: Finished difference Result 168 states and 219 transitions. [2021-12-17 15:09:54,964 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:54,965 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-17 15:09:54,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:54,966 INFO L225 Difference]: With dead ends: 168 [2021-12-17 15:09:54,967 INFO L226 Difference]: Without dead ends: 88 [2021-12-17 15:09:54,967 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:54,969 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 103 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:54,971 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [103 Valid, 111 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:54,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2021-12-17 15:09:54,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2021-12-17 15:09:54,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 75 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:09:54,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 112 transitions. [2021-12-17 15:09:54,983 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 112 transitions. Word has length 38 [2021-12-17 15:09:54,984 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:54,985 INFO L470 AbstractCegarLoop]: Abstraction has 88 states and 112 transitions. [2021-12-17 15:09:54,986 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:54,986 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 112 transitions. [2021-12-17 15:09:54,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-17 15:09:54,990 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,992 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,992 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:09:54,992 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,993 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,997 INFO L85 PathProgramCache]: Analyzing trace with hash 43096146, now seen corresponding path program 1 times [2021-12-17 15:09:54,997 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1764660299] [2021-12-17 15:09:54,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,998 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:55,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:55,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-17 15:09:55,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-17 15:09:55,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,049 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:55,050 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:55,050 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1764660299] [2021-12-17 15:09:55,050 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1764660299] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:55,050 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:55,050 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-17 15:09:55,050 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [473541004] [2021-12-17 15:09:55,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:55,051 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-17 15:09:55,051 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:55,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-17 15:09:55,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-17 15:09:55,066 INFO L87 Difference]: Start difference. First operand 88 states and 112 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:09:55,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:55,180 INFO L93 Difference]: Finished difference Result 252 states and 327 transitions. [2021-12-17 15:09:55,180 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:55,180 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-12-17 15:09:55,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:55,184 INFO L225 Difference]: With dead ends: 252 [2021-12-17 15:09:55,184 INFO L226 Difference]: Without dead ends: 172 [2021-12-17 15:09:55,185 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:55,193 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 158 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:55,194 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [164 Valid, 242 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:55,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2021-12-17 15:09:55,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 166. [2021-12-17 15:09:55,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 125 states have (on average 1.28) internal successors, (160), 133 states have internal predecessors, (160), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-17 15:09:55,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 211 transitions. [2021-12-17 15:09:55,213 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 211 transitions. Word has length 47 [2021-12-17 15:09:55,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:55,213 INFO L470 AbstractCegarLoop]: Abstraction has 166 states and 211 transitions. [2021-12-17 15:09:55,213 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:09:55,213 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 211 transitions. [2021-12-17 15:09:55,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-17 15:09:55,215 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:55,215 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:55,215 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:09:55,215 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:55,215 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:55,216 INFO L85 PathProgramCache]: Analyzing trace with hash 934824757, now seen corresponding path program 1 times [2021-12-17 15:09:55,216 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:55,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [962454012] [2021-12-17 15:09:55,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:55,216 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:55,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:55,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:55,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:55,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-17 15:09:55,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,335 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:55,336 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:55,336 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [962454012] [2021-12-17 15:09:55,336 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [962454012] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:55,336 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:55,336 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:55,336 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2095920884] [2021-12-17 15:09:55,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:55,337 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:55,337 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:55,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:55,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:55,337 INFO L87 Difference]: Start difference. First operand 166 states and 211 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:55,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:55,477 INFO L93 Difference]: Finished difference Result 332 states and 430 transitions. [2021-12-17 15:09:55,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:55,478 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-17 15:09:55,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:55,480 INFO L225 Difference]: With dead ends: 332 [2021-12-17 15:09:55,482 INFO L226 Difference]: Without dead ends: 174 [2021-12-17 15:09:55,483 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:55,484 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 75 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 462 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:55,486 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 462 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:55,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2021-12-17 15:09:55,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 169. [2021-12-17 15:09:55,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 128 states have (on average 1.2734375) internal successors, (163), 136 states have internal predecessors, (163), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-17 15:09:55,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 214 transitions. [2021-12-17 15:09:55,509 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 214 transitions. Word has length 57 [2021-12-17 15:09:55,509 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:55,509 INFO L470 AbstractCegarLoop]: Abstraction has 169 states and 214 transitions. [2021-12-17 15:09:55,509 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:55,510 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 214 transitions. [2021-12-17 15:09:55,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-17 15:09:55,511 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:55,511 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:55,511 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:09:55,511 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:55,511 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:55,511 INFO L85 PathProgramCache]: Analyzing trace with hash 1357526583, now seen corresponding path program 1 times [2021-12-17 15:09:55,512 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:55,512 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [190679229] [2021-12-17 15:09:55,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:55,512 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:55,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:55,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:55,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:55,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-17 15:09:55,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,585 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:55,585 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:55,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [190679229] [2021-12-17 15:09:55,585 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [190679229] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:55,585 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:55,585 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:55,585 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2027718030] [2021-12-17 15:09:55,585 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:55,586 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:55,587 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:55,587 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:55,587 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:55,588 INFO L87 Difference]: Start difference. First operand 169 states and 214 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:55,682 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:55,682 INFO L93 Difference]: Finished difference Result 340 states and 444 transitions. [2021-12-17 15:09:55,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:55,682 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-17 15:09:55,683 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:55,684 INFO L225 Difference]: With dead ends: 340 [2021-12-17 15:09:55,684 INFO L226 Difference]: Without dead ends: 179 [2021-12-17 15:09:55,685 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:55,685 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 76 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 361 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:55,686 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 361 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:55,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 179 states. [2021-12-17 15:09:55,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 179 to 171. [2021-12-17 15:09:55,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 130 states have (on average 1.2692307692307692) internal successors, (165), 138 states have internal predecessors, (165), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-17 15:09:55,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 216 transitions. [2021-12-17 15:09:55,709 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 216 transitions. Word has length 57 [2021-12-17 15:09:55,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:55,710 INFO L470 AbstractCegarLoop]: Abstraction has 171 states and 216 transitions. [2021-12-17 15:09:55,710 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:55,710 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 216 transitions. [2021-12-17 15:09:55,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-17 15:09:55,711 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:55,711 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:55,711 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:09:55,711 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:55,712 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:55,712 INFO L85 PathProgramCache]: Analyzing trace with hash -447911751, now seen corresponding path program 1 times [2021-12-17 15:09:55,712 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:55,712 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [67130357] [2021-12-17 15:09:55,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:55,712 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:55,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:55,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:55,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:55,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-17 15:09:55,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,800 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:55,801 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:55,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [67130357] [2021-12-17 15:09:55,801 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [67130357] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:55,801 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:55,801 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:55,815 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247760555] [2021-12-17 15:09:55,815 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:55,816 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:55,816 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:55,816 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:55,816 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:55,816 INFO L87 Difference]: Start difference. First operand 171 states and 216 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:55,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:55,996 INFO L93 Difference]: Finished difference Result 484 states and 633 transitions. [2021-12-17 15:09:55,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:55,996 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2021-12-17 15:09:55,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:55,998 INFO L225 Difference]: With dead ends: 484 [2021-12-17 15:09:55,998 INFO L226 Difference]: Without dead ends: 321 [2021-12-17 15:09:55,999 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:55,999 INFO L933 BasicCegarLoop]: 167 mSDtfsCounter, 233 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 240 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:56,000 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [240 Valid, 373 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:56,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 321 states. [2021-12-17 15:09:56,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 321 to 313. [2021-12-17 15:09:56,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 313 states, 236 states have (on average 1.2415254237288136) internal successors, (293), 248 states have internal predecessors, (293), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-12-17 15:09:56,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 313 states to 313 states and 399 transitions. [2021-12-17 15:09:56,040 INFO L78 Accepts]: Start accepts. Automaton has 313 states and 399 transitions. Word has length 57 [2021-12-17 15:09:56,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:56,041 INFO L470 AbstractCegarLoop]: Abstraction has 313 states and 399 transitions. [2021-12-17 15:09:56,041 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:56,041 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 399 transitions. [2021-12-17 15:09:56,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-12-17 15:09:56,041 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:56,042 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:56,042 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:09:56,042 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:56,042 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:56,042 INFO L85 PathProgramCache]: Analyzing trace with hash 16145041, now seen corresponding path program 1 times [2021-12-17 15:09:56,042 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:56,043 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [12619070] [2021-12-17 15:09:56,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,043 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:56,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:56,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:56,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:56,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:56,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-17 15:09:56,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,098 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:09:56,098 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:56,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [12619070] [2021-12-17 15:09:56,098 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [12619070] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:56,098 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:56,098 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:09:56,099 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431127792] [2021-12-17 15:09:56,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:56,099 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:09:56,099 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:56,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:09:56,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:56,100 INFO L87 Difference]: Start difference. First operand 313 states and 399 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:09:56,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:56,279 INFO L93 Difference]: Finished difference Result 634 states and 821 transitions. [2021-12-17 15:09:56,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-17 15:09:56,280 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2021-12-17 15:09:56,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:56,282 INFO L225 Difference]: With dead ends: 634 [2021-12-17 15:09:56,282 INFO L226 Difference]: Without dead ends: 329 [2021-12-17 15:09:56,283 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:09:56,283 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 125 mSDsluCounter, 393 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 503 SdHoareTripleChecker+Invalid, 259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:56,283 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 503 Invalid, 259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:56,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2021-12-17 15:09:56,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 309. [2021-12-17 15:09:56,294 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 309 states, 232 states have (on average 1.2112068965517242) internal successors, (281), 244 states have internal predecessors, (281), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-12-17 15:09:56,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 309 states to 309 states and 387 transitions. [2021-12-17 15:09:56,296 INFO L78 Accepts]: Start accepts. Automaton has 309 states and 387 transitions. Word has length 59 [2021-12-17 15:09:56,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:56,296 INFO L470 AbstractCegarLoop]: Abstraction has 309 states and 387 transitions. [2021-12-17 15:09:56,296 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:09:56,297 INFO L276 IsEmpty]: Start isEmpty. Operand 309 states and 387 transitions. [2021-12-17 15:09:56,297 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-17 15:09:56,297 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:56,297 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:56,297 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:09:56,298 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:56,298 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:56,298 INFO L85 PathProgramCache]: Analyzing trace with hash 1464730591, now seen corresponding path program 1 times [2021-12-17 15:09:56,298 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:56,298 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [945296605] [2021-12-17 15:09:56,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,298 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:56,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:56,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:09:56,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-17 15:09:56,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:56,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2021-12-17 15:09:56,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,381 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:56,381 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:56,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [945296605] [2021-12-17 15:09:56,382 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [945296605] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:56,382 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:56,382 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-17 15:09:56,382 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1238085288] [2021-12-17 15:09:56,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:56,382 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-17 15:09:56,383 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:56,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-17 15:09:56,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:56,383 INFO L87 Difference]: Start difference. First operand 309 states and 387 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:57,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:57,022 INFO L93 Difference]: Finished difference Result 837 states and 1104 transitions. [2021-12-17 15:09:57,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-17 15:09:57,022 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2021-12-17 15:09:57,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:57,025 INFO L225 Difference]: With dead ends: 837 [2021-12-17 15:09:57,025 INFO L226 Difference]: Without dead ends: 592 [2021-12-17 15:09:57,026 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 279 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-12-17 15:09:57,026 INFO L933 BasicCegarLoop]: 152 mSDtfsCounter, 599 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 620 mSolverCounterSat, 251 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 604 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 871 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 251 IncrementalHoareTripleChecker+Valid, 620 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:57,027 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [604 Valid, 583 Invalid, 871 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [251 Valid, 620 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-17 15:09:57,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2021-12-17 15:09:57,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 483. [2021-12-17 15:09:57,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 483 states, 363 states have (on average 1.2011019283746556) internal successors, (436), 385 states have internal predecessors, (436), 62 states have call successors, (62), 47 states have call predecessors, (62), 57 states have return successors, (104), 62 states have call predecessors, (104), 62 states have call successors, (104) [2021-12-17 15:09:57,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 483 states to 483 states and 602 transitions. [2021-12-17 15:09:57,048 INFO L78 Accepts]: Start accepts. Automaton has 483 states and 602 transitions. Word has length 61 [2021-12-17 15:09:57,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:57,048 INFO L470 AbstractCegarLoop]: Abstraction has 483 states and 602 transitions. [2021-12-17 15:09:57,048 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:57,048 INFO L276 IsEmpty]: Start isEmpty. Operand 483 states and 602 transitions. [2021-12-17 15:09:57,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2021-12-17 15:09:57,049 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:57,049 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:57,050 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:09:57,050 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:57,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:57,050 INFO L85 PathProgramCache]: Analyzing trace with hash -2028217141, now seen corresponding path program 1 times [2021-12-17 15:09:57,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:57,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1033113851] [2021-12-17 15:09:57,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:57,051 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:57,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:57,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:09:57,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:57,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:57,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:57,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-17 15:09:57,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-17 15:09:57,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:09:57,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:57,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-17 15:09:57,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,160 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 16 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:09:57,160 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:57,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1033113851] [2021-12-17 15:09:57,160 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1033113851] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:57,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1844771685] [2021-12-17 15:09:57,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:57,161 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:57,161 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:57,176 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:57,179 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:09:57,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,258 INFO L263 TraceCheckSpWp]: Trace formula consists of 512 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:09:57,263 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:57,508 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 27 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:57,508 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:57,773 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:09:57,774 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1844771685] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:57,774 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:57,774 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-17 15:09:57,774 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [321766297] [2021-12-17 15:09:57,775 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:57,775 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-17 15:09:57,775 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:57,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-17 15:09:57,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:09:57,776 INFO L87 Difference]: Start difference. First operand 483 states and 602 transitions. Second operand has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2021-12-17 15:09:58,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:58,630 INFO L93 Difference]: Finished difference Result 988 states and 1259 transitions. [2021-12-17 15:09:58,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2021-12-17 15:09:58,630 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) Word has length 111 [2021-12-17 15:09:58,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:58,631 INFO L225 Difference]: With dead ends: 988 [2021-12-17 15:09:58,631 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:09:58,633 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 250 SyntacticMatches, 1 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 324 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=345, Invalid=1137, Unknown=0, NotChecked=0, Total=1482 [2021-12-17 15:09:58,634 INFO L933 BasicCegarLoop]: 219 mSDtfsCounter, 508 mSDsluCounter, 791 mSDsCounter, 0 mSdLazyCounter, 797 mSolverCounterSat, 247 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 512 SdHoareTripleChecker+Valid, 1010 SdHoareTripleChecker+Invalid, 1044 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 247 IncrementalHoareTripleChecker+Valid, 797 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:58,635 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [512 Valid, 1010 Invalid, 1044 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [247 Valid, 797 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-17 15:09:58,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:09:58,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:09:58,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:09:58,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:09:58,636 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 111 [2021-12-17 15:09:58,636 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:58,636 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:09:58,637 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2021-12-17 15:09:58,637 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:09:58,637 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:09:58,639 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:09:58,673 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:58,854 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:09:58,856 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:10:01,580 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 450 457) the Hoare annotation is: (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (= 1 ~systemActive~0)) (not (<= ~waterLevel~0 2)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) [2021-12-17 15:10:01,580 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 450 457) no Hoare annotation was computed. [2021-12-17 15:10:01,580 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 450 457) no Hoare annotation was computed. [2021-12-17 15:10:01,580 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 357 363) no Hoare annotation was computed. [2021-12-17 15:10:01,580 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 357 363) the Hoare annotation is: true [2021-12-17 15:10:01,580 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 135 146) the Hoare annotation is: true [2021-12-17 15:10:01,581 INFO L858 garLoopResultBuilder]: For program point L139-1(lines 135 146) no Hoare annotation was computed. [2021-12-17 15:10:01,581 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 135 146) no Hoare annotation was computed. [2021-12-17 15:10:01,581 INFO L854 garLoopResultBuilder]: At program point L217(lines 212 219) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2))) [2021-12-17 15:10:01,581 INFO L854 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (let ((.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|)))) (and (let ((.cse4 (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) (and .cse3 .cse4 .cse6) .cse7)) (or .cse0 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse1 .cse2 .cse8) (let ((.cse9 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse9 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse1 (and .cse9 .cse6) .cse2 .cse8)) (let ((.cse10 (<= ~waterLevel~0 2))) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse3 .cse5 .cse10) (and .cse3 .cse10 .cse6) .cse7)))) [2021-12-17 15:10:01,581 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-12-17 15:10:01,581 INFO L854 garLoopResultBuilder]: At program point L436(line 436) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse0 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2))) [2021-12-17 15:10:01,581 INFO L854 garLoopResultBuilder]: At program point L436-1(lines 417 441) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|)))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 .cse3 .cse4) (and .cse2 .cse3 .cse5) .cse6)) (let ((.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse7 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 (and .cse7 .cse5) .cse1 (not (= |old(~pumpRunning~0)| 0)))) (let ((.cse8 (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse4 .cse8) (and .cse2 .cse8 .cse5) .cse6)))) [2021-12-17 15:10:01,581 INFO L858 garLoopResultBuilder]: For program point L337(lines 337 343) no Hoare annotation was computed. [2021-12-17 15:10:01,581 INFO L854 garLoopResultBuilder]: At program point L465(lines 458 468) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-17 15:10:01,581 INFO L858 garLoopResultBuilder]: For program point L337-2(lines 333 355) no Hoare annotation was computed. [2021-12-17 15:10:01,581 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 330 356) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (and (<= 1 ~switchedOnBeforeTS~0) .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and .cse1 (= ~pumpRunning~0 0)) .cse2 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse2 .cse3 .cse4) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3 .cse4)))) [2021-12-17 15:10:01,583 INFO L854 garLoopResultBuilder]: At program point L152(lines 147 155) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-17 15:10:01,583 INFO L858 garLoopResultBuilder]: For program point L115(lines 115 119) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (let ((.cse4 (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) (and .cse3 .cse4 .cse6) .cse7)) (or .cse1 (and (= ~waterLevel~0 |old(~waterLevel~0)|) .cse6) .cse2 .cse8) (let ((.cse9 (<= ~waterLevel~0 2))) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse3 .cse5 .cse9) (and .cse3 .cse9 .cse6) .cse7)) (or .cse0 .cse1 .cse2 .cse8))) [2021-12-17 15:10:01,583 INFO L854 garLoopResultBuilder]: At program point L115-2(lines 111 122) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-17 15:10:01,583 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L858 garLoopResultBuilder]: For program point L425(lines 425 433) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L858 garLoopResultBuilder]: For program point L421(lines 421 438) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and .cse1 .cse2 (= ~pumpRunning~0 0)) .cse3 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse3 .cse4 (and .cse5 .cse2 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 (and .cse1 .cse5 .cse2) .cse4))) [2021-12-17 15:10:01,583 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L858 garLoopResultBuilder]: For program point L216(line 216) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L858 garLoopResultBuilder]: For program point L344-1(lines 344 350) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-12-17 15:10:01,583 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 330 356) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and .cse1 .cse2 (= ~pumpRunning~0 0)) .cse3 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse3 .cse4 (and .cse5 .cse2 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 (and .cse1 .cse5 .cse2) .cse4))) [2021-12-17 15:10:01,583 INFO L854 garLoopResultBuilder]: At program point L431(line 431) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-17 15:10:01,583 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|)))) (and (let ((.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse1 (and .cse0 .cse2) .cse3 .cse4)) (let ((.cse7 (= ~waterLevel~0 1))) (or .cse5 .cse1 .cse3 (and .cse6 .cse7 .cse2) (and .cse6 .cse7 .cse8) .cse9)) (or .cse5 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) .cse1 .cse3 .cse4) (let ((.cse10 (<= ~waterLevel~0 2))) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 (and .cse6 .cse2 .cse10) (and .cse6 .cse10 .cse8) .cse9)))) [2021-12-17 15:10:01,583 INFO L854 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4))) [2021-12-17 15:10:01,584 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 330 356) no Hoare annotation was computed. [2021-12-17 15:10:01,584 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 216) no Hoare annotation was computed. [2021-12-17 15:10:01,584 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 223 252) no Hoare annotation was computed. [2021-12-17 15:10:01,584 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 223 252) the Hoare annotation is: true [2021-12-17 15:10:01,584 INFO L861 garLoopResultBuilder]: At program point L248(lines 223 252) the Hoare annotation is: true [2021-12-17 15:10:01,584 INFO L858 garLoopResultBuilder]: For program point L244(line 244) no Hoare annotation was computed. [2021-12-17 15:10:01,584 INFO L858 garLoopResultBuilder]: For program point L237(lines 237 241) no Hoare annotation was computed. [2021-12-17 15:10:01,584 INFO L861 garLoopResultBuilder]: At program point L237-1(lines 237 241) the Hoare annotation is: true [2021-12-17 15:10:01,584 INFO L858 garLoopResultBuilder]: For program point L234(line 234) no Hoare annotation was computed. [2021-12-17 15:10:01,584 INFO L861 garLoopResultBuilder]: At program point L233-2(lines 233 247) the Hoare annotation is: true [2021-12-17 15:10:01,584 INFO L861 garLoopResultBuilder]: At program point L229(line 229) the Hoare annotation is: true [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L229-1(line 229) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L609(lines 609 613) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L854 garLoopResultBuilder]: At program point L609-2(lines 601 614) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L572(lines 571 618) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L601(lines 601 614) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L854 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:01,585 INFO L861 garLoopResultBuilder]: At program point L622(lines 561 626) the Hoare annotation is: true [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L581(lines 581 587) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L581-1(lines 581 587) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L854 garLoopResultBuilder]: At program point L643(lines 639 645) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L573(lines 573 577) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L854 garLoopResultBuilder]: At program point L557(lines 552 559) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:01,585 INFO L854 garLoopResultBuilder]: At program point L619(lines 570 620) the Hoare annotation is: false [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L310(lines 310 317) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L310-2(lines 310 317) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L591(lines 591 597) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L858 garLoopResultBuilder]: For program point L591-1(lines 591 597) no Hoare annotation was computed. [2021-12-17 15:10:01,585 INFO L854 garLoopResultBuilder]: At program point L616(lines 571 618) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:01,585 INFO L854 garLoopResultBuilder]: At program point L583(line 583) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:01,586 INFO L861 garLoopResultBuilder]: At program point L294(lines 286 296) the Hoare annotation is: true [2021-12-17 15:10:01,586 INFO L861 garLoopResultBuilder]: At program point L319(lines 300 322) the Hoare annotation is: true [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point L282(lines 278 284) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point L658(lines 653 661) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point L650(lines 646 652) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 365 389) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:01,586 INFO L858 garLoopResultBuilder]: For program point L192(lines 192 198) no Hoare annotation was computed. [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point L384(line 384) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:01,586 INFO L858 garLoopResultBuilder]: For program point L384-1(lines 365 389) no Hoare annotation was computed. [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point L529(lines 514 532) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 0)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-17 15:10:01,586 INFO L858 garLoopResultBuilder]: For program point L523(lines 523 527) no Hoare annotation was computed. [2021-12-17 15:10:01,586 INFO L858 garLoopResultBuilder]: For program point L523-2(lines 523 527) no Hoare annotation was computed. [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point L197(lines 188 201) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (and (<= 2 ~waterLevel~0) .cse2) .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse2) .cse1 (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point L447(lines 442 449) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:01,586 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 365 389) no Hoare annotation was computed. [2021-12-17 15:10:01,586 INFO L854 garLoopResultBuilder]: At program point L379(line 379) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) (= ~pumpRunning~0 0)) .cse1 (not (= |old(~pumpRunning~0)| 0))) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-17 15:10:01,586 INFO L858 garLoopResultBuilder]: For program point L373(lines 373 381) no Hoare annotation was computed. [2021-12-17 15:10:01,586 INFO L858 garLoopResultBuilder]: For program point L369(lines 369 386) no Hoare annotation was computed. [2021-12-17 15:10:01,586 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 123 134) no Hoare annotation was computed. [2021-12-17 15:10:01,586 INFO L858 garLoopResultBuilder]: For program point L127-1(lines 123 134) no Hoare annotation was computed. [2021-12-17 15:10:01,587 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 123 134) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse2) (or .cse0 (not (= ~pumpRunning~0 0)) .cse1 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse2 .cse3))) [2021-12-17 15:10:01,587 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 391 415) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:01,587 INFO L854 garLoopResultBuilder]: At program point L405(line 405) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:01,587 INFO L854 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:01,587 INFO L854 garLoopResultBuilder]: At program point L207(lines 202 210) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:01,587 INFO L858 garLoopResultBuilder]: For program point L399(lines 399 407) no Hoare annotation was computed. [2021-12-17 15:10:01,587 INFO L858 garLoopResultBuilder]: For program point L395(lines 395 412) no Hoare annotation was computed. [2021-12-17 15:10:01,587 INFO L854 garLoopResultBuilder]: At program point L548(lines 533 551) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:01,587 INFO L858 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2021-12-17 15:10:01,587 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 391 415) no Hoare annotation was computed. [2021-12-17 15:10:01,587 INFO L858 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2021-12-17 15:10:01,587 INFO L854 garLoopResultBuilder]: At program point L410(line 410) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-17 15:10:01,587 INFO L858 garLoopResultBuilder]: For program point L410-1(lines 391 415) no Hoare annotation was computed. [2021-12-17 15:10:01,587 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 469 477) no Hoare annotation was computed. [2021-12-17 15:10:01,587 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 469 477) the Hoare annotation is: true [2021-12-17 15:10:01,587 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 469 477) no Hoare annotation was computed. [2021-12-17 15:10:01,590 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:01,590 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:10:01,610 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:10:01 BoogieIcfgContainer [2021-12-17 15:10:01,611 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:10:01,611 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:10:01,611 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:10:01,611 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:10:01,612 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:54" (3/4) ... [2021-12-17 15:10:01,614 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:10:01,632 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:10:01,632 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:10:01,632 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:10:01,632 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:10:01,632 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:10:01,633 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:10:01,633 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:10:01,633 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:10:01,633 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-17 15:10:01,654 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2021-12-17 15:10:01,654 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:10:01,654 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:10:01,655 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:10:01,655 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:10:01,655 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:01,655 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:01,675 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:01,691 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:01,692 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:01,692 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:01,692 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:01,692 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:01,692 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:01,693 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:01,693 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:01,693 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || (\result == 1 && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:01,693 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:01,693 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) && (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:01,694 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:01,727 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:10:01,728 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:10:01,728 INFO L158 Benchmark]: Toolchain (without parser) took 8264.13ms. Allocated memory was 115.3MB in the beginning and 232.8MB in the end (delta: 117.4MB). Free memory was 86.1MB in the beginning and 98.4MB in the end (delta: -12.2MB). Peak memory consumption was 105.2MB. Max. memory is 16.1GB. [2021-12-17 15:10:01,728 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 115.3MB. Free memory is still 72.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:10:01,728 INFO L158 Benchmark]: CACSL2BoogieTranslator took 366.08ms. Allocated memory was 115.3MB in the beginning and 176.2MB in the end (delta: 60.8MB). Free memory was 85.7MB in the beginning and 142.4MB in the end (delta: -56.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:10:01,729 INFO L158 Benchmark]: Boogie Procedure Inliner took 32.88ms. Allocated memory is still 176.2MB. Free memory was 142.4MB in the beginning and 139.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:01,729 INFO L158 Benchmark]: Boogie Preprocessor took 18.31ms. Allocated memory is still 176.2MB. Free memory was 139.7MB in the beginning and 138.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:01,729 INFO L158 Benchmark]: RCFGBuilder took 481.29ms. Allocated memory is still 176.2MB. Free memory was 138.1MB in the beginning and 120.1MB in the end (delta: 18.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-17 15:10:01,729 INFO L158 Benchmark]: TraceAbstraction took 7244.65ms. Allocated memory was 176.2MB in the beginning and 232.8MB in the end (delta: 56.6MB). Free memory was 119.3MB in the beginning and 105.7MB in the end (delta: 13.6MB). Peak memory consumption was 105.6MB. Max. memory is 16.1GB. [2021-12-17 15:10:01,729 INFO L158 Benchmark]: Witness Printer took 116.52ms. Allocated memory is still 232.8MB. Free memory was 105.7MB in the beginning and 98.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:10:01,730 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 115.3MB. Free memory is still 72.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 366.08ms. Allocated memory was 115.3MB in the beginning and 176.2MB in the end (delta: 60.8MB). Free memory was 85.7MB in the beginning and 142.4MB in the end (delta: -56.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 32.88ms. Allocated memory is still 176.2MB. Free memory was 142.4MB in the beginning and 139.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.31ms. Allocated memory is still 176.2MB. Free memory was 139.7MB in the beginning and 138.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 481.29ms. Allocated memory is still 176.2MB. Free memory was 138.1MB in the beginning and 120.1MB in the end (delta: 18.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 7244.65ms. Allocated memory was 176.2MB in the beginning and 232.8MB in the end (delta: 56.6MB). Free memory was 119.3MB in the beginning and 105.7MB in the end (delta: 13.6MB). Peak memory consumption was 105.6MB. Max. memory is 16.1GB. * Witness Printer took 116.52ms. Allocated memory is still 232.8MB. Free memory was 105.7MB in the beginning and 98.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 216]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.2s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1928 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1890 mSDsluCounter, 3986 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2638 mSDsCounter, 699 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2101 IncrementalHoareTripleChecker+Invalid, 2800 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 699 mSolverCounterUnsat, 1348 mSDtfsCounter, 2101 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 445 GetRequests, 338 SyntacticMatches, 2 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 632 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=483occurred in iteration=9, InterpolantAutomatonStates: 101, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 156 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 1202 PreInvPairs, 1402 NumberOfFragments, 1981 HoareAnnotationTreeSize, 1202 FomulaSimplifications, 1456 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 50 FomulaSimplificationsInter, 9908 FormulaSimplificationTreeSizeReductionInter, 2.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 663 NumberOfCodeBlocks, 663 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 762 ConstructedInterpolants, 0 QuantifiedInterpolants, 1506 SizeOfPredicates, 3 NumberOfNonLiveVariables, 512 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 107/141 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 639]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 417]: Loop Invariant Derived loop invariant: ((((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 278]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && waterLevel <= 2) && systemActive == 1) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == 1)) || ((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && systemActive == 1) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || (\result == 1 && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 570]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 286]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 223]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 514]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) && (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 212]: Loop Invariant Derived loop invariant: (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 653]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && waterLevel <= 2) && systemActive == 1) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == 1)) || ((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && systemActive == 1) - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-12-17 15:10:01,799 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE