./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:10:04,990 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:10:04,995 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:10:05,023 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:10:05,023 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:10:05,027 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:10:05,029 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:10:05,032 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:10:05,034 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:10:05,039 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:10:05,040 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:10:05,041 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:10:05,041 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:10:05,044 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:10:05,046 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:10:05,049 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:10:05,050 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:10:05,051 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:10:05,056 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:10:05,058 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:10:05,060 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:10:05,061 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:10:05,063 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:10:05,063 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:10:05,069 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:10:05,070 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:10:05,070 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:10:05,071 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:10:05,072 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:10:05,073 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:10:05,073 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:10:05,074 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:10:05,076 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:10:05,077 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:10:05,078 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:10:05,078 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:10:05,079 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:10:05,079 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:10:05,079 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:10:05,080 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:10:05,081 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:10:05,082 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:10:05,120 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:10:05,124 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:10:05,125 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:10:05,125 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:10:05,126 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:10:05,126 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:10:05,127 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:10:05,127 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:10:05,127 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:10:05,127 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:10:05,128 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:10:05,128 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:10:05,128 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:10:05,129 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:10:05,129 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:10:05,129 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:10:05,129 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:10:05,129 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:10:05,129 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:10:05,130 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:10:05,130 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:10:05,130 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:10:05,130 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:10:05,130 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:10:05,131 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:10:05,131 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:10:05,131 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:10:05,132 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:10:05,133 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:10:05,133 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:10:05,133 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:10:05,133 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:10:05,133 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:10:05,134 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:10:05,134 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b [2021-12-17 15:10:05,328 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:10:05,344 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:10:05,346 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:10:05,346 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:10:05,347 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:10:05,348 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2021-12-17 15:10:05,436 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/23fe8fd8d/8e416dace7c449ac8ef6347ea0b73de8/FLAGb2f3e3f11 [2021-12-17 15:10:05,890 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:10:05,890 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2021-12-17 15:10:05,900 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/23fe8fd8d/8e416dace7c449ac8ef6347ea0b73de8/FLAGb2f3e3f11 [2021-12-17 15:10:06,376 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/23fe8fd8d/8e416dace7c449ac8ef6347ea0b73de8 [2021-12-17 15:10:06,378 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:10:06,379 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:10:06,381 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:10:06,381 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:10:06,383 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:10:06,383 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,384 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@53272376 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06, skipping insertion in model container [2021-12-17 15:10:06,384 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,389 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:10:06,425 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:10:06,581 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2021-12-17 15:10:06,640 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:10:06,652 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:10:06,697 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2021-12-17 15:10:06,759 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:10:06,775 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:10:06,776 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06 WrapperNode [2021-12-17 15:10:06,776 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:10:06,777 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:10:06,777 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:10:06,777 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:10:06,782 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,794 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,838 INFO L137 Inliner]: procedures = 61, calls = 166, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 302 [2021-12-17 15:10:06,844 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:10:06,845 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:10:06,845 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:10:06,845 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:10:06,852 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,852 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,863 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,864 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,869 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,873 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,875 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,877 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:10:06,879 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:10:06,880 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:10:06,880 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:10:06,881 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (1/1) ... [2021-12-17 15:10:06,888 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:10:06,897 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:10:06,909 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:10:06,914 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:10:06,936 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:10:06,936 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:10:06,937 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:10:06,937 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:10:06,937 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:10:06,937 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:10:06,937 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:10:06,937 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:10:06,938 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:10:06,938 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:10:06,938 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:10:06,938 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:10:06,938 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:10:06,938 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-17 15:10:06,939 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-17 15:10:06,939 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-17 15:10:06,939 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-17 15:10:06,939 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:10:06,939 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:10:06,939 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:10:06,940 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:10:06,940 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:10:06,940 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:10:06,940 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:10:06,999 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:10:07,001 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:10:07,285 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:10:07,291 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:10:07,291 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:10:07,293 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:10:07 BoogieIcfgContainer [2021-12-17 15:10:07,293 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:10:07,294 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:10:07,294 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:10:07,304 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:10:07,304 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:10:06" (1/3) ... [2021-12-17 15:10:07,305 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a5c602 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:10:07, skipping insertion in model container [2021-12-17 15:10:07,305 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:10:06" (2/3) ... [2021-12-17 15:10:07,306 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a5c602 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:10:07, skipping insertion in model container [2021-12-17 15:10:07,306 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:10:07" (3/3) ... [2021-12-17 15:10:07,307 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product64.cil.c [2021-12-17 15:10:07,311 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:10:07,312 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:10:07,364 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:10:07,372 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:10:07,372 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:10:07,400 INFO L276 IsEmpty]: Start isEmpty. Operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2021-12-17 15:10:07,411 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:10:07,411 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:07,412 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:07,413 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:07,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:07,418 INFO L85 PathProgramCache]: Analyzing trace with hash 1423497268, now seen corresponding path program 1 times [2021-12-17 15:10:07,433 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:07,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1589035246] [2021-12-17 15:10:07,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:07,435 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:07,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:07,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:10:07,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:07,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:10:07,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:07,677 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:10:07,677 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:07,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1589035246] [2021-12-17 15:10:07,678 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1589035246] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:07,679 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:07,679 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:10:07,681 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1766304342] [2021-12-17 15:10:07,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:07,685 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:10:07,685 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:07,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:10:07,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:10:07,708 INFO L87 Difference]: Start difference. First operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:10:07,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:07,738 INFO L93 Difference]: Finished difference Result 227 states and 306 transitions. [2021-12-17 15:10:07,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:10:07,741 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-17 15:10:07,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:07,748 INFO L225 Difference]: With dead ends: 227 [2021-12-17 15:10:07,749 INFO L226 Difference]: Without dead ends: 109 [2021-12-17 15:10:07,752 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:10:07,754 INFO L933 BasicCegarLoop]: 150 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:07,755 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:10:07,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2021-12-17 15:10:07,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 109. [2021-12-17 15:10:07,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 80 states have (on average 1.3) internal successors, (104), 90 states have internal predecessors, (104), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-17 15:10:07,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 141 transitions. [2021-12-17 15:10:07,798 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 141 transitions. Word has length 32 [2021-12-17 15:10:07,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:07,799 INFO L470 AbstractCegarLoop]: Abstraction has 109 states and 141 transitions. [2021-12-17 15:10:07,799 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:10:07,799 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 141 transitions. [2021-12-17 15:10:07,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-17 15:10:07,802 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:07,802 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:07,802 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:10:07,802 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:07,803 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:07,803 INFO L85 PathProgramCache]: Analyzing trace with hash -1062885571, now seen corresponding path program 1 times [2021-12-17 15:10:07,803 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:07,804 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1768964877] [2021-12-17 15:10:07,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:07,804 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:07,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:07,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:10:07,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:07,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:10:07,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:07,863 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:10:07,864 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:07,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1768964877] [2021-12-17 15:10:07,864 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1768964877] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:07,864 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:07,864 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:10:07,865 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [881715245] [2021-12-17 15:10:07,865 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:07,866 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:10:07,866 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:07,867 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:10:07,867 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:10:07,867 INFO L87 Difference]: Start difference. First operand 109 states and 141 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:10:07,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:07,885 INFO L93 Difference]: Finished difference Result 178 states and 230 transitions. [2021-12-17 15:10:07,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:10:07,886 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-17 15:10:07,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:07,887 INFO L225 Difference]: With dead ends: 178 [2021-12-17 15:10:07,887 INFO L226 Difference]: Without dead ends: 100 [2021-12-17 15:10:07,888 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:10:07,890 INFO L933 BasicCegarLoop]: 128 mSDtfsCounter, 17 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:07,890 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 234 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:10:07,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2021-12-17 15:10:07,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2021-12-17 15:10:07,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:10:07,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 129 transitions. [2021-12-17 15:10:07,901 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 129 transitions. Word has length 33 [2021-12-17 15:10:07,901 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:07,902 INFO L470 AbstractCegarLoop]: Abstraction has 100 states and 129 transitions. [2021-12-17 15:10:07,902 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:10:07,902 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 129 transitions. [2021-12-17 15:10:07,903 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-17 15:10:07,903 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:07,904 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:07,904 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:10:07,904 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:07,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:07,905 INFO L85 PathProgramCache]: Analyzing trace with hash 214115468, now seen corresponding path program 1 times [2021-12-17 15:10:07,905 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:07,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1233536916] [2021-12-17 15:10:07,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:07,906 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:07,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:07,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:10:07,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:07,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-17 15:10:07,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:07,979 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:10:07,979 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:07,979 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1233536916] [2021-12-17 15:10:07,980 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1233536916] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:07,980 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:07,980 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:10:07,980 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1304977222] [2021-12-17 15:10:07,980 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:07,981 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:10:07,981 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:07,982 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:10:07,982 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:10:07,982 INFO L87 Difference]: Start difference. First operand 100 states and 129 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:10:08,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:08,023 INFO L93 Difference]: Finished difference Result 282 states and 370 transitions. [2021-12-17 15:10:08,024 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:10:08,024 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-17 15:10:08,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:08,027 INFO L225 Difference]: With dead ends: 282 [2021-12-17 15:10:08,027 INFO L226 Difference]: Without dead ends: 190 [2021-12-17 15:10:08,035 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:10:08,037 INFO L933 BasicCegarLoop]: 157 mSDtfsCounter, 117 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 273 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:08,038 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [117 Valid, 273 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:10:08,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2021-12-17 15:10:08,063 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 187. [2021-12-17 15:10:08,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 187 states, 136 states have (on average 1.3308823529411764) internal successors, (181), 155 states have internal predecessors, (181), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2021-12-17 15:10:08,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 245 transitions. [2021-12-17 15:10:08,066 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 245 transitions. Word has length 38 [2021-12-17 15:10:08,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:08,066 INFO L470 AbstractCegarLoop]: Abstraction has 187 states and 245 transitions. [2021-12-17 15:10:08,067 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:10:08,067 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 245 transitions. [2021-12-17 15:10:08,068 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-17 15:10:08,069 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:08,069 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:08,069 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:10:08,069 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:08,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:08,070 INFO L85 PathProgramCache]: Analyzing trace with hash 384205224, now seen corresponding path program 1 times [2021-12-17 15:10:08,070 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:08,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1038519834] [2021-12-17 15:10:08,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:08,071 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:08,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-17 15:10:08,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-17 15:10:08,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,149 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:10:08,149 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:08,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1038519834] [2021-12-17 15:10:08,149 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1038519834] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:08,150 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:08,150 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:10:08,150 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [993991258] [2021-12-17 15:10:08,150 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:08,151 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:10:08,151 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:08,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:10:08,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:10:08,152 INFO L87 Difference]: Start difference. First operand 187 states and 245 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:10:08,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:08,274 INFO L93 Difference]: Finished difference Result 487 states and 650 transitions. [2021-12-17 15:10:08,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:10:08,275 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-17 15:10:08,275 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:08,278 INFO L225 Difference]: With dead ends: 487 [2021-12-17 15:10:08,278 INFO L226 Difference]: Without dead ends: 308 [2021-12-17 15:10:08,280 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:10:08,281 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 66 mSDsluCounter, 453 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 591 SdHoareTripleChecker+Invalid, 93 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:08,282 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 591 Invalid, 93 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:10:08,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2021-12-17 15:10:08,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 295. [2021-12-17 15:10:08,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 295 states, 218 states have (on average 1.275229357798165) internal successors, (278), 237 states have internal predecessors, (278), 42 states have call successors, (42), 34 states have call predecessors, (42), 34 states have return successors, (54), 37 states have call predecessors, (54), 42 states have call successors, (54) [2021-12-17 15:10:08,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 295 states to 295 states and 374 transitions. [2021-12-17 15:10:08,338 INFO L78 Accepts]: Start accepts. Automaton has 295 states and 374 transitions. Word has length 41 [2021-12-17 15:10:08,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:08,338 INFO L470 AbstractCegarLoop]: Abstraction has 295 states and 374 transitions. [2021-12-17 15:10:08,338 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:10:08,339 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 374 transitions. [2021-12-17 15:10:08,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-17 15:10:08,340 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:08,341 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:08,341 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:10:08,341 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:08,342 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:08,355 INFO L85 PathProgramCache]: Analyzing trace with hash -578050563, now seen corresponding path program 1 times [2021-12-17 15:10:08,355 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:08,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1357627390] [2021-12-17 15:10:08,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:08,356 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:08,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:10:08,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:10:08,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:08,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:08,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-17 15:10:08,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,522 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:10:08,522 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:08,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1357627390] [2021-12-17 15:10:08,523 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1357627390] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:08,523 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:08,523 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:10:08,523 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [859675348] [2021-12-17 15:10:08,523 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:08,524 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:10:08,524 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:08,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:10:08,525 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:10:08,525 INFO L87 Difference]: Start difference. First operand 295 states and 374 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:10:08,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:08,700 INFO L93 Difference]: Finished difference Result 654 states and 855 transitions. [2021-12-17 15:10:08,700 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:10:08,701 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2021-12-17 15:10:08,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:08,704 INFO L225 Difference]: With dead ends: 654 [2021-12-17 15:10:08,704 INFO L226 Difference]: Without dead ends: 367 [2021-12-17 15:10:08,706 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:10:08,707 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 82 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 464 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:08,707 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [87 Valid, 464 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:10:08,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2021-12-17 15:10:08,739 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 355. [2021-12-17 15:10:08,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 264 states have (on average 1.2575757575757576) internal successors, (332), 283 states have internal predecessors, (332), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2021-12-17 15:10:08,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 446 transitions. [2021-12-17 15:10:08,750 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 446 transitions. Word has length 65 [2021-12-17 15:10:08,750 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:08,751 INFO L470 AbstractCegarLoop]: Abstraction has 355 states and 446 transitions. [2021-12-17 15:10:08,751 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:10:08,751 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 446 transitions. [2021-12-17 15:10:08,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-17 15:10:08,758 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:08,759 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:08,759 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:10:08,759 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:08,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:08,760 INFO L85 PathProgramCache]: Analyzing trace with hash 808152831, now seen corresponding path program 1 times [2021-12-17 15:10:08,761 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:08,761 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95454262] [2021-12-17 15:10:08,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:08,762 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:08,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:10:08,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:10:08,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:08,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:08,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-17 15:10:08,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,847 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:10:08,847 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:08,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95454262] [2021-12-17 15:10:08,847 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [95454262] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:08,847 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:08,848 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:10:08,848 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1817760154] [2021-12-17 15:10:08,848 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:08,849 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:10:08,849 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:08,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:10:08,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:10:08,850 INFO L87 Difference]: Start difference. First operand 355 states and 446 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:10:08,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:08,990 INFO L93 Difference]: Finished difference Result 720 states and 931 transitions. [2021-12-17 15:10:08,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:10:08,991 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2021-12-17 15:10:08,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:08,995 INFO L225 Difference]: With dead ends: 720 [2021-12-17 15:10:08,995 INFO L226 Difference]: Without dead ends: 373 [2021-12-17 15:10:09,007 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:10:09,009 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 83 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 364 SdHoareTripleChecker+Invalid, 131 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:09,011 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [89 Valid, 364 Invalid, 131 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:10:09,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2021-12-17 15:10:09,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 359. [2021-12-17 15:10:09,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 359 states, 268 states have (on average 1.2537313432835822) internal successors, (336), 287 states have internal predecessors, (336), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2021-12-17 15:10:09,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 359 states to 359 states and 450 transitions. [2021-12-17 15:10:09,065 INFO L78 Accepts]: Start accepts. Automaton has 359 states and 450 transitions. Word has length 65 [2021-12-17 15:10:09,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:09,067 INFO L470 AbstractCegarLoop]: Abstraction has 359 states and 450 transitions. [2021-12-17 15:10:09,067 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:10:09,067 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 450 transitions. [2021-12-17 15:10:09,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-17 15:10:09,071 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:09,071 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:09,072 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:10:09,072 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:09,073 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:09,073 INFO L85 PathProgramCache]: Analyzing trace with hash 1509752705, now seen corresponding path program 1 times [2021-12-17 15:10:09,073 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:09,073 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2055747977] [2021-12-17 15:10:09,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:09,073 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:09,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:10:09,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:10:09,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:09,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:09,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-17 15:10:09,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,217 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:10:09,218 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:09,218 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2055747977] [2021-12-17 15:10:09,219 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2055747977] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:09,219 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:09,222 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:10:09,223 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [791141732] [2021-12-17 15:10:09,223 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:09,223 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:10:09,223 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:09,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:10:09,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:10:09,225 INFO L87 Difference]: Start difference. First operand 359 states and 450 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:10:09,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:09,466 INFO L93 Difference]: Finished difference Result 1005 states and 1308 transitions. [2021-12-17 15:10:09,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:10:09,467 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 65 [2021-12-17 15:10:09,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:09,470 INFO L225 Difference]: With dead ends: 1005 [2021-12-17 15:10:09,470 INFO L226 Difference]: Without dead ends: 654 [2021-12-17 15:10:09,472 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:10:09,473 INFO L933 BasicCegarLoop]: 173 mSDtfsCounter, 257 mSDsluCounter, 221 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 265 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:09,473 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [265 Valid, 394 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:10:09,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 654 states. [2021-12-17 15:10:09,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 654 to 647. [2021-12-17 15:10:09,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 647 states, 482 states have (on average 1.2219917012448134) internal successors, (589), 510 states have internal predecessors, (589), 87 states have call successors, (87), 71 states have call predecessors, (87), 77 states have return successors, (139), 88 states have call predecessors, (139), 87 states have call successors, (139) [2021-12-17 15:10:09,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 647 states to 647 states and 815 transitions. [2021-12-17 15:10:09,527 INFO L78 Accepts]: Start accepts. Automaton has 647 states and 815 transitions. Word has length 65 [2021-12-17 15:10:09,528 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:09,528 INFO L470 AbstractCegarLoop]: Abstraction has 647 states and 815 transitions. [2021-12-17 15:10:09,528 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:10:09,529 INFO L276 IsEmpty]: Start isEmpty. Operand 647 states and 815 transitions. [2021-12-17 15:10:09,530 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-17 15:10:09,531 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:09,531 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:09,531 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:10:09,531 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:09,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:09,532 INFO L85 PathProgramCache]: Analyzing trace with hash 920584039, now seen corresponding path program 1 times [2021-12-17 15:10:09,532 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:09,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1854259165] [2021-12-17 15:10:09,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:09,533 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:09,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:09,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:10:09,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-17 15:10:09,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:09,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:09,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-17 15:10:09,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:09,680 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:10:09,680 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:09,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1854259165] [2021-12-17 15:10:09,681 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1854259165] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:09,681 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:09,681 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-17 15:10:09,681 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1387255776] [2021-12-17 15:10:09,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:09,682 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-17 15:10:09,682 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:09,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-17 15:10:09,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:10:09,682 INFO L87 Difference]: Start difference. First operand 647 states and 815 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-17 15:10:10,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:10,578 INFO L93 Difference]: Finished difference Result 1770 states and 2347 transitions. [2021-12-17 15:10:10,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-17 15:10:10,579 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) Word has length 69 [2021-12-17 15:10:10,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:10,588 INFO L225 Difference]: With dead ends: 1770 [2021-12-17 15:10:10,588 INFO L226 Difference]: Without dead ends: 1245 [2021-12-17 15:10:10,591 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-12-17 15:10:10,591 INFO L933 BasicCegarLoop]: 169 mSDtfsCounter, 746 mSDsluCounter, 505 mSDsCounter, 0 mSdLazyCounter, 771 mSolverCounterSat, 304 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 754 SdHoareTripleChecker+Valid, 674 SdHoareTripleChecker+Invalid, 1075 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 304 IncrementalHoareTripleChecker+Valid, 771 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:10,592 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [754 Valid, 674 Invalid, 1075 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [304 Valid, 771 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-17 15:10:10,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1245 states. [2021-12-17 15:10:10,658 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1245 to 1089. [2021-12-17 15:10:10,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1089 states, 809 states have (on average 1.2224969097651421) internal successors, (989), 863 states have internal predecessors, (989), 148 states have call successors, (148), 112 states have call predecessors, (148), 131 states have return successors, (238), 147 states have call predecessors, (238), 148 states have call successors, (238) [2021-12-17 15:10:10,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1089 states to 1089 states and 1375 transitions. [2021-12-17 15:10:10,665 INFO L78 Accepts]: Start accepts. Automaton has 1089 states and 1375 transitions. Word has length 69 [2021-12-17 15:10:10,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:10,666 INFO L470 AbstractCegarLoop]: Abstraction has 1089 states and 1375 transitions. [2021-12-17 15:10:10,668 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-17 15:10:10,668 INFO L276 IsEmpty]: Start isEmpty. Operand 1089 states and 1375 transitions. [2021-12-17 15:10:10,670 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-17 15:10:10,670 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:10,670 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:10,671 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:10:10,671 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:10,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:10,671 INFO L85 PathProgramCache]: Analyzing trace with hash -1123487047, now seen corresponding path program 1 times [2021-12-17 15:10:10,672 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:10,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [296652309] [2021-12-17 15:10:10,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:10,672 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:10,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:10,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:10,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:10,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:10:10,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:10,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:10,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:10,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:10,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:10,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:10,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:10,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:10,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:10,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-17 15:10:10,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:10,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-12-17 15:10:10,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:10,743 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:10:10,743 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:10,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [296652309] [2021-12-17 15:10:10,743 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [296652309] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:10,744 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:10,744 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:10:10,744 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1249138451] [2021-12-17 15:10:10,744 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:10,744 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:10:10,745 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:10,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:10:10,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:10:10,745 INFO L87 Difference]: Start difference. First operand 1089 states and 1375 transitions. Second operand has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 4 states have internal predecessors, (78), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-12-17 15:10:11,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:11,054 INFO L93 Difference]: Finished difference Result 1834 states and 2306 transitions. [2021-12-17 15:10:11,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-17 15:10:11,055 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 4 states have internal predecessors, (78), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 99 [2021-12-17 15:10:11,055 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:11,059 INFO L225 Difference]: With dead ends: 1834 [2021-12-17 15:10:11,059 INFO L226 Difference]: Without dead ends: 753 [2021-12-17 15:10:11,061 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-17 15:10:11,064 INFO L933 BasicCegarLoop]: 157 mSDtfsCounter, 321 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 254 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 330 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 254 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:11,064 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [330 Valid, 380 Invalid, 379 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 254 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:10:11,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 753 states. [2021-12-17 15:10:11,094 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 753 to 658. [2021-12-17 15:10:11,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 658 states, 494 states have (on average 1.2044534412955465) internal successors, (595), 527 states have internal predecessors, (595), 87 states have call successors, (87), 66 states have call predecessors, (87), 76 states have return successors, (130), 86 states have call predecessors, (130), 87 states have call successors, (130) [2021-12-17 15:10:11,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 658 states to 658 states and 812 transitions. [2021-12-17 15:10:11,101 INFO L78 Accepts]: Start accepts. Automaton has 658 states and 812 transitions. Word has length 99 [2021-12-17 15:10:11,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:11,101 INFO L470 AbstractCegarLoop]: Abstraction has 658 states and 812 transitions. [2021-12-17 15:10:11,102 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 4 states have internal predecessors, (78), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-12-17 15:10:11,102 INFO L276 IsEmpty]: Start isEmpty. Operand 658 states and 812 transitions. [2021-12-17 15:10:11,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-12-17 15:10:11,105 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:11,105 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:11,105 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:10:11,105 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:11,107 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:11,107 INFO L85 PathProgramCache]: Analyzing trace with hash 1227003405, now seen corresponding path program 1 times [2021-12-17 15:10:11,107 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:11,107 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [750277684] [2021-12-17 15:10:11,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:11,108 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:11,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:11,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:10:11,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:11,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:11,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:11,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:11,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-17 15:10:11,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-12-17 15:10:11,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-17 15:10:11,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:10:11,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:11,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-17 15:10:11,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,285 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 16 proven. 13 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-17 15:10:11,286 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:11,286 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [750277684] [2021-12-17 15:10:11,286 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [750277684] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:10:11,286 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [975770500] [2021-12-17 15:10:11,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:11,286 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:10:11,287 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:10:11,291 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:10:11,321 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:10:11,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:11,409 INFO L263 TraceCheckSpWp]: Trace formula consists of 541 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:10:11,421 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:10:11,792 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 31 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:10:11,792 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:10:12,086 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-17 15:10:12,086 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [975770500] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:10:12,087 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:10:12,087 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-17 15:10:12,087 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1580280356] [2021-12-17 15:10:12,087 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:10:12,088 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-17 15:10:12,088 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:12,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-17 15:10:12,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:10:12,089 INFO L87 Difference]: Start difference. First operand 658 states and 812 transitions. Second operand has 15 states, 15 states have (on average 9.6) internal successors, (144), 10 states have internal predecessors, (144), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 6 states have call successors, (23) [2021-12-17 15:10:13,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:13,310 INFO L93 Difference]: Finished difference Result 1424 states and 1803 transitions. [2021-12-17 15:10:13,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2021-12-17 15:10:13,311 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.6) internal successors, (144), 10 states have internal predecessors, (144), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 6 states have call successors, (23) Word has length 123 [2021-12-17 15:10:13,311 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:13,312 INFO L225 Difference]: With dead ends: 1424 [2021-12-17 15:10:13,312 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:10:13,325 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 325 GetRequests, 279 SyntacticMatches, 1 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 565 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=451, Invalid=1711, Unknown=0, NotChecked=0, Total=2162 [2021-12-17 15:10:13,326 INFO L933 BasicCegarLoop]: 256 mSDtfsCounter, 507 mSDsluCounter, 1271 mSDsCounter, 0 mSdLazyCounter, 1428 mSolverCounterSat, 240 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 515 SdHoareTripleChecker+Valid, 1527 SdHoareTripleChecker+Invalid, 1668 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 240 IncrementalHoareTripleChecker+Valid, 1428 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:13,327 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [515 Valid, 1527 Invalid, 1668 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [240 Valid, 1428 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-17 15:10:13,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:10:13,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:10:13,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:10:13,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:10:13,328 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2021-12-17 15:10:13,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:13,328 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:10:13,329 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.6) internal successors, (144), 10 states have internal predecessors, (144), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 6 states have call successors, (23) [2021-12-17 15:10:13,329 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:10:13,329 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:10:13,331 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:10:13,358 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:10:13,555 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:10:13,557 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:10:17,807 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 325 332) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= ~waterLevel~0 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse1 (not (<= 2 ~waterLevel~0)) .cse3))) [2021-12-17 15:10:17,807 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 325 332) no Hoare annotation was computed. [2021-12-17 15:10:17,807 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 325 332) no Hoare annotation was computed. [2021-12-17 15:10:17,807 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 215 221) no Hoare annotation was computed. [2021-12-17 15:10:17,808 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 215 221) the Hoare annotation is: true [2021-12-17 15:10:17,808 INFO L858 garLoopResultBuilder]: For program point L417(lines 417 421) no Hoare annotation was computed. [2021-12-17 15:10:17,808 INFO L858 garLoopResultBuilder]: For program point L417-2(lines 417 421) no Hoare annotation was computed. [2021-12-17 15:10:17,808 INFO L854 garLoopResultBuilder]: At program point L263(line 263) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:17,808 INFO L854 garLoopResultBuilder]: At program point L259(line 259) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:17,808 INFO L858 garLoopResultBuilder]: For program point L257(lines 257 265) no Hoare annotation was computed. [2021-12-17 15:10:17,808 INFO L858 garLoopResultBuilder]: For program point L253(lines 253 270) no Hoare annotation was computed. [2021-12-17 15:10:17,808 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 249 273) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:17,808 INFO L854 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-17 15:10:17,808 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 249 273) no Hoare annotation was computed. [2021-12-17 15:10:17,809 INFO L858 garLoopResultBuilder]: For program point L268-1(lines 249 273) no Hoare annotation was computed. [2021-12-17 15:10:17,809 INFO L854 garLoopResultBuilder]: At program point L423(lines 408 426) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:17,809 INFO L854 garLoopResultBuilder]: At program point L549(lines 544 552) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:17,809 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 344 352) no Hoare annotation was computed. [2021-12-17 15:10:17,809 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 344 352) the Hoare annotation is: true [2021-12-17 15:10:17,809 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 344 352) no Hoare annotation was computed. [2021-12-17 15:10:17,809 INFO L858 garLoopResultBuilder]: For program point L481-1(lines 477 488) no Hoare annotation was computed. [2021-12-17 15:10:17,809 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 477 488) the Hoare annotation is: true [2021-12-17 15:10:17,809 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 477 488) no Hoare annotation was computed. [2021-12-17 15:10:17,809 INFO L858 garLoopResultBuilder]: For program point L576(line 576) no Hoare annotation was computed. [2021-12-17 15:10:17,810 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 555 584) no Hoare annotation was computed. [2021-12-17 15:10:17,810 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 555 584) the Hoare annotation is: true [2021-12-17 15:10:17,810 INFO L858 garLoopResultBuilder]: For program point L569(lines 569 573) no Hoare annotation was computed. [2021-12-17 15:10:17,810 INFO L861 garLoopResultBuilder]: At program point L569-1(lines 569 573) the Hoare annotation is: true [2021-12-17 15:10:17,810 INFO L858 garLoopResultBuilder]: For program point L566(line 566) no Hoare annotation was computed. [2021-12-17 15:10:17,810 INFO L861 garLoopResultBuilder]: At program point L565-2(lines 565 579) the Hoare annotation is: true [2021-12-17 15:10:17,810 INFO L861 garLoopResultBuilder]: At program point L561(line 561) the Hoare annotation is: true [2021-12-17 15:10:17,810 INFO L858 garLoopResultBuilder]: For program point L561-1(line 561) no Hoare annotation was computed. [2021-12-17 15:10:17,810 INFO L861 garLoopResultBuilder]: At program point L580(lines 555 584) the Hoare annotation is: true [2021-12-17 15:10:17,811 INFO L858 garLoopResultBuilder]: For program point L283(lines 283 291) no Hoare annotation was computed. [2021-12-17 15:10:17,811 INFO L858 garLoopResultBuilder]: For program point L279(lines 279 296) no Hoare annotation was computed. [2021-12-17 15:10:17,811 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-12-17 15:10:17,811 INFO L854 garLoopResultBuilder]: At program point L659(lines 654 661) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse3) (or .cse0 .cse2 (not (= ~systemActive~0 0))))) [2021-12-17 15:10:17,811 INFO L858 garLoopResultBuilder]: For program point L457(lines 457 461) no Hoare annotation was computed. [2021-12-17 15:10:17,811 INFO L854 garLoopResultBuilder]: At program point L457-2(lines 453 464) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse0 .cse5 (not (= ~systemActive~0 0))))) [2021-12-17 15:10:17,811 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 188 214) no Hoare annotation was computed. [2021-12-17 15:10:17,812 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse6 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and .cse6 (<= ~waterLevel~0 2) (= ~pumpRunning~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (and (<= 1 ~switchedOnBeforeTS~0) .cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse3 (not (= ~systemActive~0 0))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse4 .cse5) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse4 .cse5)))) [2021-12-17 15:10:17,812 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0 2)) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse10 (and (= ~waterLevel~0 |old(~waterLevel~0)|) .cse11 .cse6)) (.cse9 (not (= ~systemActive~0 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (let ((.cse4 (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) (and .cse3 .cse4 .cse6) .cse7)) (or .cse0 .cse1 .cse8 .cse9) (or .cse1 .cse2 .cse8 .cse10) (or .cse1 .cse8 .cse10 .cse9) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse3 .cse5 .cse11) (and .cse3 .cse11 .cse6) .cse7) (or .cse0 .cse1 .cse2 .cse8)))) [2021-12-17 15:10:17,812 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-12-17 15:10:17,812 INFO L858 garLoopResultBuilder]: For program point L202-1(lines 202 208) no Hoare annotation was computed. [2021-12-17 15:10:17,813 INFO L854 garLoopResultBuilder]: At program point L289(line 289) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse0 .cse5 (not (= ~systemActive~0 0))))) [2021-12-17 15:10:17,813 INFO L854 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse0 .cse5 (not (= ~systemActive~0 0))))) [2021-12-17 15:10:17,814 INFO L854 garLoopResultBuilder]: At program point L281(line 281) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or .cse0 .cse5 (not (= ~systemActive~0 0))))) [2021-12-17 15:10:17,814 INFO L858 garLoopResultBuilder]: For program point L281-1(line 281) no Hoare annotation was computed. [2021-12-17 15:10:17,814 INFO L854 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse0 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse1 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2) (or .cse0 .cse3 (not (= ~systemActive~0 0))))) [2021-12-17 15:10:17,814 INFO L854 garLoopResultBuilder]: At program point L294-1(lines 275 299) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (let ((.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse1 (and .cse0 .cse2) .cse3 .cse4)) (let ((.cse6 (= ~waterLevel~0 1))) (or (not (<= 2 |old(~waterLevel~0)|)) .cse1 .cse3 (and .cse5 .cse6 .cse7) (and .cse5 .cse6 .cse2) .cse8)) (or .cse1 .cse4 (not (= ~systemActive~0 0))) (let ((.cse9 (<= ~waterLevel~0 2))) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 (and .cse5 .cse7 .cse9) (and .cse5 .cse9 .cse2) .cse8)))) [2021-12-17 15:10:17,814 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (and .cse7 .cse6 (= ~pumpRunning~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse2 .cse4 (and .cse5 .cse6 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse7 .cse5 .cse6) .cse4) (or .cse0 .cse1 .cse3 (not (= ~systemActive~0 0)))))) [2021-12-17 15:10:17,815 INFO L858 garLoopResultBuilder]: For program point L195(lines 195 201) no Hoare annotation was computed. [2021-12-17 15:10:17,815 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-12-17 15:10:17,815 INFO L858 garLoopResultBuilder]: For program point L195-2(lines 191 213) no Hoare annotation was computed. [2021-12-17 15:10:17,815 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-12-17 15:10:17,815 INFO L858 garLoopResultBuilder]: For program point L658(line 658) no Hoare annotation was computed. [2021-12-17 15:10:17,815 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-12-17 15:10:17,815 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 188 214) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (and .cse7 .cse6 (= ~pumpRunning~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse2 .cse4 (and .cse5 .cse6 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse7 .cse5 .cse6) .cse4) (or .cse0 .cse1 .cse3 (not (= ~systemActive~0 0)))))) [2021-12-17 15:10:17,816 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse5 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse6 (and .cse5 .cse10)) (.cse4 (not (= ~systemActive~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (= 1 ~systemActive~0))) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse12 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse2 .cse6 .cse7 .cse3) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse0 .cse2 .cse7 (and .cse8 .cse9 .cse10) (and .cse8 .cse9 .cse11) .cse12)) (or .cse2 .cse6 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse7 .cse3) (let ((.cse13 (<= ~waterLevel~0 2))) (or .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse7 (and .cse8 .cse10 .cse13) (and .cse8 .cse13 .cse11) .cse12))))) [2021-12-17 15:10:17,816 INFO L854 garLoopResultBuilder]: At program point L526(lines 521 529) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse13 (<= ~waterLevel~0 2)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse0 .cse13 .cse10)) (.cse12 (not (= ~systemActive~0 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (and .cse0 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse2 .cse3) (let ((.cse8 (= ~waterLevel~0 1))) (or .cse5 .cse1 .cse2 (and .cse7 .cse8 .cse9) (and .cse7 .cse8 .cse10) .cse11)) (or .cse5 .cse6 .cse1 .cse3 .cse12) (or .cse1 .cse3 .cse4 .cse12) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse7 .cse9 .cse13) (and .cse7 .cse13 .cse10) .cse11)))) [2021-12-17 15:10:17,817 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 188 214) no Hoare annotation was computed. [2021-12-17 15:10:17,817 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 658) no Hoare annotation was computed. [2021-12-17 15:10:17,817 INFO L854 garLoopResultBuilder]: At program point L168(lines 117 169) the Hoare annotation is: false [2021-12-17 15:10:17,817 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:10:17,817 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:10:17,817 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:10:17,817 INFO L858 garLoopResultBuilder]: For program point L156(lines 156 162) no Hoare annotation was computed. [2021-12-17 15:10:17,817 INFO L854 garLoopResultBuilder]: At program point L156-2(lines 148 163) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 (= ~systemActive~0 0) .cse1 .cse3) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse1 .cse2) (and .cse0 .cse4 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:17,817 INFO L858 garLoopResultBuilder]: For program point L119(lines 118 167) no Hoare annotation was computed. [2021-12-17 15:10:17,818 INFO L854 garLoopResultBuilder]: At program point L693(lines 688 696) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:17,818 INFO L858 garLoopResultBuilder]: For program point L148(lines 148 163) no Hoare annotation was computed. [2021-12-17 15:10:17,818 INFO L854 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (= 1 ~systemActive~0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 (= ~systemActive~0 1)))) [2021-12-17 15:10:17,818 INFO L854 garLoopResultBuilder]: At program point L685(lines 681 687) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:17,818 INFO L854 garLoopResultBuilder]: At program point L140(line 140) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 (= ~systemActive~0 0) .cse1 .cse3) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse1 .cse2) (and .cse0 .cse4 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:17,818 INFO L854 garLoopResultBuilder]: At program point L165(lines 118 167) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 (= ~systemActive~0 0) .cse1 .cse3) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse1 .cse2) (and .cse0 .cse4 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:17,818 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:10:17,818 INFO L858 garLoopResultBuilder]: For program point L640(lines 640 647) no Hoare annotation was computed. [2021-12-17 15:10:17,818 INFO L858 garLoopResultBuilder]: For program point L128(lines 128 134) no Hoare annotation was computed. [2021-12-17 15:10:17,818 INFO L858 garLoopResultBuilder]: For program point L128-1(lines 128 134) no Hoare annotation was computed. [2021-12-17 15:10:17,818 INFO L858 garLoopResultBuilder]: For program point L640-2(lines 640 647) no Hoare annotation was computed. [2021-12-17 15:10:17,818 INFO L858 garLoopResultBuilder]: For program point L120(lines 120 124) no Hoare annotation was computed. [2021-12-17 15:10:17,818 INFO L861 garLoopResultBuilder]: At program point L624(lines 616 626) the Hoare annotation is: true [2021-12-17 15:10:17,818 INFO L861 garLoopResultBuilder]: At program point L649(lines 630 652) the Hoare annotation is: true [2021-12-17 15:10:17,819 INFO L854 garLoopResultBuilder]: At program point L678(lines 674 680) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:17,819 INFO L854 garLoopResultBuilder]: At program point L447(lines 442 449) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse1 .cse2) (and .cse0 .cse3 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:17,819 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:17,819 INFO L854 garLoopResultBuilder]: At program point L439(lines 427 441) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~systemActive~0 0) (<= ~waterLevel~0 2) (= ~pumpRunning~0 0)) [2021-12-17 15:10:17,819 INFO L858 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2021-12-17 15:10:17,819 INFO L858 garLoopResultBuilder]: For program point L431-1(lines 431 437) no Hoare annotation was computed. [2021-12-17 15:10:17,819 INFO L861 garLoopResultBuilder]: At program point L171(lines 108 175) the Hoare annotation is: true [2021-12-17 15:10:17,819 INFO L858 garLoopResultBuilder]: For program point L138(lines 138 144) no Hoare annotation was computed. [2021-12-17 15:10:17,819 INFO L858 garLoopResultBuilder]: For program point L138-1(lines 138 144) no Hoare annotation was computed. [2021-12-17 15:10:17,819 INFO L854 garLoopResultBuilder]: At program point L613(lines 609 615) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:17,819 INFO L854 garLoopResultBuilder]: At program point L130(line 130) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 (= ~systemActive~0 0) .cse1 .cse3) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse1 .cse2) (and .cse0 .cse4 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-17 15:10:17,819 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 223 247) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:17,819 INFO L854 garLoopResultBuilder]: At program point L539(lines 530 543) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (and (<= 2 ~waterLevel~0) .cse2) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-17 15:10:17,819 INFO L854 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:17,820 INFO L858 garLoopResultBuilder]: For program point L242-1(lines 223 247) no Hoare annotation was computed. [2021-12-17 15:10:17,820 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 223 247) no Hoare annotation was computed. [2021-12-17 15:10:17,820 INFO L858 garLoopResultBuilder]: For program point L315(lines 315 321) no Hoare annotation was computed. [2021-12-17 15:10:17,820 INFO L854 garLoopResultBuilder]: At program point L313(line 313) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 0)) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:17,820 INFO L854 garLoopResultBuilder]: At program point L315-2(lines 308 324) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse2 (<= 2 ~waterLevel~0))) (or (and .cse2 (= ~pumpRunning~0 0)) (and (<= 1 ~pumpRunning~0) .cse2) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-17 15:10:17,820 INFO L858 garLoopResultBuilder]: For program point L313-1(line 313) no Hoare annotation was computed. [2021-12-17 15:10:17,820 INFO L858 garLoopResultBuilder]: For program point L534(lines 534 540) no Hoare annotation was computed. [2021-12-17 15:10:17,821 INFO L854 garLoopResultBuilder]: At program point L404(lines 389 407) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2)))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (and (<= 2 ~waterLevel~0) .cse0) .cse1 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse0) .cse2 (not (= |old(~pumpRunning~0)| 0)))) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse2 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-17 15:10:17,821 INFO L854 garLoopResultBuilder]: At program point L305(lines 300 307) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:17,821 INFO L858 garLoopResultBuilder]: For program point L398(lines 398 402) no Hoare annotation was computed. [2021-12-17 15:10:17,821 INFO L854 garLoopResultBuilder]: At program point L237(line 237) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-17 15:10:17,821 INFO L858 garLoopResultBuilder]: For program point L398-2(lines 398 402) no Hoare annotation was computed. [2021-12-17 15:10:17,821 INFO L858 garLoopResultBuilder]: For program point L231(lines 231 239) no Hoare annotation was computed. [2021-12-17 15:10:17,821 INFO L858 garLoopResultBuilder]: For program point L227(lines 227 244) no Hoare annotation was computed. [2021-12-17 15:10:17,822 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 465 476) no Hoare annotation was computed. [2021-12-17 15:10:17,822 INFO L858 garLoopResultBuilder]: For program point L469-1(lines 465 476) no Hoare annotation was computed. [2021-12-17 15:10:17,822 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 465 476) the Hoare annotation is: (let ((.cse3 (not (= ~pumpRunning~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse2) (or .cse0 .cse3 .cse4 (not (= ~systemActive~0 0))) (or .cse0 .cse3 .cse1 .cse4) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse2 .cse4))) [2021-12-17 15:10:17,822 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 333 343) the Hoare annotation is: true [2021-12-17 15:10:17,822 INFO L861 garLoopResultBuilder]: At program point L494(lines 489 497) the Hoare annotation is: true [2021-12-17 15:10:17,822 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 333 343) no Hoare annotation was computed. [2021-12-17 15:10:17,823 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 333 343) no Hoare annotation was computed. [2021-12-17 15:10:17,826 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:17,827 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:10:17,855 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:10:17 BoogieIcfgContainer [2021-12-17 15:10:17,855 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:10:17,855 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:10:17,856 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:10:17,856 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:10:17,856 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:10:07" (3/4) ... [2021-12-17 15:10:17,859 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:10:17,863 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:10:17,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:10:17,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:10:17,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:10:17,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:10:17,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:10:17,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:10:17,864 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:10:17,865 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-17 15:10:17,865 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-17 15:10:17,871 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-17 15:10:17,872 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:10:17,872 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:10:17,873 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:10:17,873 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:10:17,874 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:17,874 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:17,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && waterLevel <= 2) && pumpRunning == 0)) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && waterLevel <= 2) && pumpRunning == 0)) || !(systemActive == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:17,893 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) [2021-12-17 15:10:17,893 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(2 <= \old(waterLevel)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((!(2 <= \old(waterLevel)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:17,893 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:17,894 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) [2021-12-17 15:10:17,894 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && waterLevel <= 2) && pumpRunning == 0)) && ((((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && waterLevel <= 2) && pumpRunning == 0)) || !(systemActive == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:17,895 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:17,895 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:17,895 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || (1 <= \result && pumpRunning == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:17,895 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:17,895 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:17,896 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) && (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:17,925 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:10:17,925 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:10:17,925 INFO L158 Benchmark]: Toolchain (without parser) took 11546.32ms. Allocated memory was 88.1MB in the beginning and 161.5MB in the end (delta: 73.4MB). Free memory was 53.2MB in the beginning and 52.0MB in the end (delta: 1.2MB). Peak memory consumption was 74.6MB. Max. memory is 16.1GB. [2021-12-17 15:10:17,926 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 73.4MB. Free memory is still 44.1MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:10:17,926 INFO L158 Benchmark]: CACSL2BoogieTranslator took 395.38ms. Allocated memory is still 88.1MB. Free memory was 53.0MB in the beginning and 64.6MB in the end (delta: -11.6MB). Peak memory consumption was 21.4MB. Max. memory is 16.1GB. [2021-12-17 15:10:17,926 INFO L158 Benchmark]: Boogie Procedure Inliner took 67.25ms. Allocated memory is still 88.1MB. Free memory was 64.3MB in the beginning and 61.8MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:17,927 INFO L158 Benchmark]: Boogie Preprocessor took 32.93ms. Allocated memory is still 88.1MB. Free memory was 61.8MB in the beginning and 60.0MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:17,927 INFO L158 Benchmark]: RCFGBuilder took 413.43ms. Allocated memory is still 88.1MB. Free memory was 60.0MB in the beginning and 42.5MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-17 15:10:17,927 INFO L158 Benchmark]: TraceAbstraction took 10560.94ms. Allocated memory was 88.1MB in the beginning and 161.5MB in the end (delta: 73.4MB). Free memory was 42.1MB in the beginning and 59.4MB in the end (delta: -17.2MB). Peak memory consumption was 74.6MB. Max. memory is 16.1GB. [2021-12-17 15:10:17,928 INFO L158 Benchmark]: Witness Printer took 69.53ms. Allocated memory is still 161.5MB. Free memory was 59.4MB in the beginning and 52.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:10:17,929 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 73.4MB. Free memory is still 44.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 395.38ms. Allocated memory is still 88.1MB. Free memory was 53.0MB in the beginning and 64.6MB in the end (delta: -11.6MB). Peak memory consumption was 21.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 67.25ms. Allocated memory is still 88.1MB. Free memory was 64.3MB in the beginning and 61.8MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 32.93ms. Allocated memory is still 88.1MB. Free memory was 61.8MB in the beginning and 60.0MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 413.43ms. Allocated memory is still 88.1MB. Free memory was 60.0MB in the beginning and 42.5MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 10560.94ms. Allocated memory was 88.1MB in the beginning and 161.5MB in the end (delta: 73.4MB). Free memory was 42.1MB in the beginning and 59.4MB in the end (delta: -17.2MB). Peak memory consumption was 74.6MB. Max. memory is 16.1GB. * Witness Printer took 69.53ms. Allocated memory is still 161.5MB. Free memory was 59.4MB in the beginning and 52.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 658]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 118 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.5s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2245 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2196 mSDsluCounter, 5051 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3493 mSDsCounter, 817 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2969 IncrementalHoareTripleChecker+Invalid, 3786 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 817 mSolverCounterUnsat, 1558 mSDtfsCounter, 2969 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 497 GetRequests, 379 SyntacticMatches, 2 SemanticMatches, 116 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 878 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1089occurred in iteration=8, InterpolantAutomatonStates: 114, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 10 MinimizatonAttempts, 300 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 55 LocationsWithAnnotation, 2326 PreInvPairs, 2627 NumberOfFragments, 2439 HoareAnnotationTreeSize, 2326 FomulaSimplifications, 4038 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 55 FomulaSimplificationsInter, 14259 FormulaSimplificationTreeSizeReductionInter, 3.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 753 NumberOfCodeBlocks, 753 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 864 ConstructedInterpolants, 0 QuantifiedInterpolants, 1608 SizeOfPredicates, 3 NumberOfNonLiveVariables, 541 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 144/178 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 674]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && waterLevel <= 2) && systemActive == 1) && pumpRunning == 0) || (((splverifierCounter == 0 && systemActive == 0) && waterLevel <= 2) && pumpRunning == 0)) || ((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == 1)) || ((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && systemActive == 1) - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && ((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 389]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) && (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 681]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: ((((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && waterLevel <= 2) && pumpRunning == 0)) && ((((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || (\result <= 2 && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && waterLevel <= 2) && pumpRunning == 0)) || !(systemActive == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && waterLevel <= 2) && pumpRunning == 0)) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && waterLevel <= 2) && pumpRunning == 0)) || !(systemActive == 0))) && ((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: ((splverifierCounter == 0 && systemActive == 0) && waterLevel <= 2) && pumpRunning == 0 - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((((!(2 <= \old(waterLevel)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) && ((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(\old(waterLevel) <= 2)) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(2 <= \old(waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((!(2 <= \old(waterLevel)) || (((\result <= 2 && 2 <= \result) && 1 < tmp) && tmp <= 2)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && waterLevel <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel <= 2) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || (1 <= \result && pumpRunning == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && waterLevel <= 2) && systemActive == 1) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == 1)) || ((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && systemActive == 1) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 544]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(waterLevel <= 2)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-17 15:10:17,974 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE