./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 278b945680d29bf571e1aaa42d90b0a6b141ce129976e6e0985d57b09f7f9d7c --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:16:55,080 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:16:55,082 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:16:55,142 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:16:55,143 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:16:55,145 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:16:55,146 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:16:55,148 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:16:55,150 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:16:55,153 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:16:55,154 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:16:55,155 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:16:55,155 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:16:55,157 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:16:55,158 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:16:55,160 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:16:55,161 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:16:55,161 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:16:55,163 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:16:55,167 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:16:55,168 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:16:55,169 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:16:55,170 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:16:55,170 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:16:55,175 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:16:55,175 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:16:55,175 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:16:55,176 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:16:55,177 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:16:55,177 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:16:55,177 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:16:55,178 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:16:55,179 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:16:55,180 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:16:55,181 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:16:55,181 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:16:55,181 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:16:55,181 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:16:55,181 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:16:55,183 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:16:55,183 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:16:55,184 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:16:55,207 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:16:55,207 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:16:55,207 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:16:55,208 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:16:55,209 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:16:55,209 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:16:55,209 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:16:55,210 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:16:55,210 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:16:55,210 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:16:55,210 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:16:55,211 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:16:55,211 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:16:55,211 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:16:55,211 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:16:55,211 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:16:55,211 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:16:55,211 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:16:55,211 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:16:55,212 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:16:55,212 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:16:55,212 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:16:55,212 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:16:55,212 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:16:55,212 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:55,212 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:16:55,213 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:16:55,213 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:16:55,213 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:16:55,213 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:16:55,213 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:16:55,213 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:16:55,214 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:16:55,214 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:16:55,214 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 278b945680d29bf571e1aaa42d90b0a6b141ce129976e6e0985d57b09f7f9d7c [2021-12-21 13:16:55,417 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:16:55,434 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:16:55,436 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:16:55,436 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:16:55,437 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:16:55,438 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c [2021-12-21 13:16:55,476 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/57107b1f7/b1c164d106e744bbb17c2272a73594d6/FLAG5365b29c7 [2021-12-21 13:16:55,905 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:16:55,906 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c [2021-12-21 13:16:55,914 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/57107b1f7/b1c164d106e744bbb17c2272a73594d6/FLAG5365b29c7 [2021-12-21 13:16:55,923 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/57107b1f7/b1c164d106e744bbb17c2272a73594d6 [2021-12-21 13:16:55,925 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:16:55,927 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:16:55,929 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:55,929 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:16:55,932 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:16:55,932 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:55" (1/1) ... [2021-12-21 13:16:55,933 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@438df840 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:55, skipping insertion in model container [2021-12-21 13:16:55,933 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:55" (1/1) ... [2021-12-21 13:16:55,938 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:16:55,978 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:16:56,171 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c[6886,6899] [2021-12-21 13:16:56,222 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:56,241 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:16:56,284 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product49.cil.c[6886,6899] [2021-12-21 13:16:56,325 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:56,340 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:16:56,341 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56 WrapperNode [2021-12-21 13:16:56,341 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:56,342 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:56,342 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:16:56,342 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:16:56,347 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,364 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,390 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 262 [2021-12-21 13:16:56,390 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:56,391 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:16:56,391 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:16:56,391 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:16:56,397 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,397 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,399 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,399 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,404 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,407 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,408 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,410 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:16:56,414 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:16:56,415 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:16:56,415 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:16:56,423 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (1/1) ... [2021-12-21 13:16:56,428 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:56,437 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:56,445 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:16:56,451 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:16:56,482 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:16:56,482 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:16:56,483 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:16:56,483 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:16:56,483 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:16:56,483 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:16:56,483 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:16:56,483 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:16:56,483 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:16:56,484 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:16:56,484 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:16:56,484 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-21 13:16:56,484 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-21 13:16:56,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:16:56,484 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:16:56,484 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:16:56,485 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:16:56,485 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:16:56,546 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:16:56,547 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:16:56,793 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:16:56,798 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:16:56,800 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:16:56,802 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:56 BoogieIcfgContainer [2021-12-21 13:16:56,802 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:16:56,804 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:16:56,804 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:16:56,807 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:16:56,807 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:16:55" (1/3) ... [2021-12-21 13:16:56,808 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@75c906e2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:56, skipping insertion in model container [2021-12-21 13:16:56,808 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:56" (2/3) ... [2021-12-21 13:16:56,808 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@75c906e2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:56, skipping insertion in model container [2021-12-21 13:16:56,808 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:56" (3/3) ... [2021-12-21 13:16:56,809 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product49.cil.c [2021-12-21 13:16:56,813 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:16:56,813 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:16:56,852 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:16:56,858 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:16:56,858 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:16:56,882 INFO L276 IsEmpty]: Start isEmpty. Operand has 92 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-12-21 13:16:56,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-21 13:16:56,890 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:56,890 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:56,891 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:56,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:56,895 INFO L85 PathProgramCache]: Analyzing trace with hash -1747145324, now seen corresponding path program 1 times [2021-12-21 13:16:56,902 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:56,903 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1018418099] [2021-12-21 13:16:56,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:56,904 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:56,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-21 13:16:57,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:16:57,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,050 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:57,050 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:57,051 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1018418099] [2021-12-21 13:16:57,059 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1018418099] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:57,059 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:57,059 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:16:57,061 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [962876788] [2021-12-21 13:16:57,061 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:57,064 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:16:57,064 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:57,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:16:57,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:57,087 INFO L87 Difference]: Start difference. First operand has 92 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:57,106 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:57,106 INFO L93 Difference]: Finished difference Result 175 states and 238 transitions. [2021-12-21 13:16:57,108 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:16:57,109 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-21 13:16:57,109 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:57,115 INFO L225 Difference]: With dead ends: 175 [2021-12-21 13:16:57,115 INFO L226 Difference]: Without dead ends: 83 [2021-12-21 13:16:57,117 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:57,119 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:57,120 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:57,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2021-12-21 13:16:57,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2021-12-21 13:16:57,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:16:57,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 107 transitions. [2021-12-21 13:16:57,146 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 107 transitions. Word has length 32 [2021-12-21 13:16:57,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:57,147 INFO L470 AbstractCegarLoop]: Abstraction has 83 states and 107 transitions. [2021-12-21 13:16:57,147 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:57,147 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 107 transitions. [2021-12-21 13:16:57,148 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-12-21 13:16:57,148 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:57,149 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:57,149 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:16:57,149 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:57,149 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:57,149 INFO L85 PathProgramCache]: Analyzing trace with hash -372618950, now seen corresponding path program 1 times [2021-12-21 13:16:57,150 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:57,150 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492863823] [2021-12-21 13:16:57,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:57,150 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:57,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:57,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-21 13:16:57,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,224 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:57,224 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:57,225 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492863823] [2021-12-21 13:16:57,225 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492863823] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:57,225 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:57,225 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:16:57,225 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2098122698] [2021-12-21 13:16:57,225 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:57,226 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:16:57,226 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:57,226 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:16:57,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:57,227 INFO L87 Difference]: Start difference. First operand 83 states and 107 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:57,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:57,242 INFO L93 Difference]: Finished difference Result 158 states and 209 transitions. [2021-12-21 13:16:57,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:16:57,243 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-12-21 13:16:57,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:57,244 INFO L225 Difference]: With dead ends: 158 [2021-12-21 13:16:57,244 INFO L226 Difference]: Without dead ends: 83 [2021-12-21 13:16:57,244 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:57,245 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 84 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:57,246 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 105 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:57,246 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2021-12-21 13:16:57,251 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2021-12-21 13:16:57,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 64 states have (on average 1.296875) internal successors, (83), 71 states have internal predecessors, (83), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:16:57,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 106 transitions. [2021-12-21 13:16:57,252 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 106 transitions. Word has length 37 [2021-12-21 13:16:57,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:57,253 INFO L470 AbstractCegarLoop]: Abstraction has 83 states and 106 transitions. [2021-12-21 13:16:57,254 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:57,254 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 106 transitions. [2021-12-21 13:16:57,255 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-12-21 13:16:57,255 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:57,255 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:57,255 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:16:57,255 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:57,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:57,256 INFO L85 PathProgramCache]: Analyzing trace with hash -2098549486, now seen corresponding path program 1 times [2021-12-21 13:16:57,256 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:57,256 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564768828] [2021-12-21 13:16:57,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:57,256 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:57,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:16:57,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-21 13:16:57,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:57,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-21 13:16:57,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,331 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:57,331 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:57,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [564768828] [2021-12-21 13:16:57,331 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [564768828] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:57,331 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:57,331 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 13:16:57,332 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1613015245] [2021-12-21 13:16:57,332 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:57,332 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-21 13:16:57,332 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:57,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 13:16:57,333 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 13:16:57,333 INFO L87 Difference]: Start difference. First operand 83 states and 106 transitions. Second operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:57,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:57,415 INFO L93 Difference]: Finished difference Result 146 states and 186 transitions. [2021-12-21 13:16:57,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-21 13:16:57,415 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 43 [2021-12-21 13:16:57,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:57,416 INFO L225 Difference]: With dead ends: 146 [2021-12-21 13:16:57,416 INFO L226 Difference]: Without dead ends: 89 [2021-12-21 13:16:57,417 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 13:16:57,417 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 63 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:57,418 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [70 Valid, 203 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:57,418 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2021-12-21 13:16:57,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 74. [2021-12-21 13:16:57,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-21 13:16:57,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 94 transitions. [2021-12-21 13:16:57,425 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 94 transitions. Word has length 43 [2021-12-21 13:16:57,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:57,425 INFO L470 AbstractCegarLoop]: Abstraction has 74 states and 94 transitions. [2021-12-21 13:16:57,425 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:57,425 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 94 transitions. [2021-12-21 13:16:57,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-21 13:16:57,426 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:57,426 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:57,426 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:16:57,426 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:57,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:57,427 INFO L85 PathProgramCache]: Analyzing trace with hash 273957597, now seen corresponding path program 1 times [2021-12-21 13:16:57,427 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:57,427 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [43519756] [2021-12-21 13:16:57,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:57,427 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:57,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:57,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:57,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:57,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-21 13:16:57,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,521 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:57,522 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:57,522 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [43519756] [2021-12-21 13:16:57,522 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [43519756] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:57,522 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:57,522 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:57,522 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2062736356] [2021-12-21 13:16:57,523 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:57,523 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:57,523 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:57,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:57,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:57,524 INFO L87 Difference]: Start difference. First operand 74 states and 94 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-12-21 13:16:57,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:57,669 INFO L93 Difference]: Finished difference Result 218 states and 279 transitions. [2021-12-21 13:16:57,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:57,670 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 47 [2021-12-21 13:16:57,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:57,673 INFO L225 Difference]: With dead ends: 218 [2021-12-21 13:16:57,673 INFO L226 Difference]: Without dead ends: 152 [2021-12-21 13:16:57,674 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:16:57,675 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 194 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 197 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:57,675 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [197 Valid, 317 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:57,676 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2021-12-21 13:16:57,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 146. [2021-12-21 13:16:57,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 113 states have (on average 1.2743362831858407) internal successors, (144), 120 states have internal predecessors, (144), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2021-12-21 13:16:57,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 181 transitions. [2021-12-21 13:16:57,696 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 181 transitions. Word has length 47 [2021-12-21 13:16:57,697 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:57,697 INFO L470 AbstractCegarLoop]: Abstraction has 146 states and 181 transitions. [2021-12-21 13:16:57,697 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2021-12-21 13:16:57,697 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 181 transitions. [2021-12-21 13:16:57,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-21 13:16:57,707 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:57,707 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:57,708 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:16:57,708 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:57,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:57,710 INFO L85 PathProgramCache]: Analyzing trace with hash -419087457, now seen corresponding path program 1 times [2021-12-21 13:16:57,711 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:57,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2112679667] [2021-12-21 13:16:57,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:57,713 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:57,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:57,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:57,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-21 13:16:57,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,782 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:57,782 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:57,782 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2112679667] [2021-12-21 13:16:57,782 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2112679667] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:57,782 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:57,782 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:16:57,783 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1012841239] [2021-12-21 13:16:57,783 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:57,783 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:16:57,783 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:57,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:16:57,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:16:57,784 INFO L87 Difference]: Start difference. First operand 146 states and 181 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:16:57,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:57,882 INFO L93 Difference]: Finished difference Result 292 states and 366 transitions. [2021-12-21 13:16:57,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:57,883 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-12-21 13:16:57,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:57,885 INFO L225 Difference]: With dead ends: 292 [2021-12-21 13:16:57,885 INFO L226 Difference]: Without dead ends: 154 [2021-12-21 13:16:57,888 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:57,890 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 64 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 99 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 397 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 99 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:57,891 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 397 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 99 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:57,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2021-12-21 13:16:57,901 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 149. [2021-12-21 13:16:57,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 123 states have internal predecessors, (147), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2021-12-21 13:16:57,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 184 transitions. [2021-12-21 13:16:57,902 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 184 transitions. Word has length 51 [2021-12-21 13:16:57,903 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:57,903 INFO L470 AbstractCegarLoop]: Abstraction has 149 states and 184 transitions. [2021-12-21 13:16:57,903 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:16:57,903 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 184 transitions. [2021-12-21 13:16:57,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-21 13:16:57,904 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:57,904 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:57,904 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:16:57,904 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:57,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:57,905 INFO L85 PathProgramCache]: Analyzing trace with hash -2108031199, now seen corresponding path program 1 times [2021-12-21 13:16:57,905 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:57,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1816478233] [2021-12-21 13:16:57,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:57,905 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:57,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:57,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:57,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-21 13:16:57,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:57,952 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:57,952 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:57,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1816478233] [2021-12-21 13:16:57,952 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1816478233] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:57,952 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:57,952 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:57,952 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349495002] [2021-12-21 13:16:57,953 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:57,953 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:57,953 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:57,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:57,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:57,954 INFO L87 Difference]: Start difference. First operand 149 states and 184 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:16:58,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:58,027 INFO L93 Difference]: Finished difference Result 300 states and 377 transitions. [2021-12-21 13:16:58,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:16:58,028 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-12-21 13:16:58,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:58,029 INFO L225 Difference]: With dead ends: 300 [2021-12-21 13:16:58,029 INFO L226 Difference]: Without dead ends: 159 [2021-12-21 13:16:58,030 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:58,030 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 67 mSDsluCounter, 213 mSDsCounter, 0 mSdLazyCounter, 74 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 311 SdHoareTripleChecker+Invalid, 88 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 74 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:58,031 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [71 Valid, 311 Invalid, 88 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 74 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:58,031 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2021-12-21 13:16:58,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 151. [2021-12-21 13:16:58,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 118 states have (on average 1.2627118644067796) internal successors, (149), 125 states have internal predecessors, (149), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2021-12-21 13:16:58,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 186 transitions. [2021-12-21 13:16:58,040 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 186 transitions. Word has length 51 [2021-12-21 13:16:58,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:58,040 INFO L470 AbstractCegarLoop]: Abstraction has 151 states and 186 transitions. [2021-12-21 13:16:58,040 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:16:58,041 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 186 transitions. [2021-12-21 13:16:58,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-21 13:16:58,041 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:58,041 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:58,041 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:16:58,041 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:58,042 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:58,042 INFO L85 PathProgramCache]: Analyzing trace with hash -1685329373, now seen corresponding path program 1 times [2021-12-21 13:16:58,042 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:58,042 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [5647244] [2021-12-21 13:16:58,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:58,042 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:58,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:58,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:58,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-21 13:16:58,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,113 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:58,114 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:58,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [5647244] [2021-12-21 13:16:58,114 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [5647244] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:58,114 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:58,114 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:58,114 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [261908213] [2021-12-21 13:16:58,114 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:58,114 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:58,114 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:58,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:58,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:58,115 INFO L87 Difference]: Start difference. First operand 151 states and 186 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:16:58,277 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:58,277 INFO L93 Difference]: Finished difference Result 431 states and 551 transitions. [2021-12-21 13:16:58,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:58,278 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-12-21 13:16:58,278 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:58,279 INFO L225 Difference]: With dead ends: 431 [2021-12-21 13:16:58,279 INFO L226 Difference]: Without dead ends: 288 [2021-12-21 13:16:58,280 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:58,280 INFO L933 BasicCegarLoop]: 148 mSDtfsCounter, 210 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 217 SdHoareTripleChecker+Valid, 324 SdHoareTripleChecker+Invalid, 201 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:58,280 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [217 Valid, 324 Invalid, 201 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:58,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2021-12-21 13:16:58,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 280. [2021-12-21 13:16:58,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 215 states have (on average 1.2465116279069768) internal successors, (268), 226 states have internal predecessors, (268), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2021-12-21 13:16:58,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 351 transitions. [2021-12-21 13:16:58,302 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 351 transitions. Word has length 51 [2021-12-21 13:16:58,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:58,302 INFO L470 AbstractCegarLoop]: Abstraction has 280 states and 351 transitions. [2021-12-21 13:16:58,302 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:16:58,302 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 351 transitions. [2021-12-21 13:16:58,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-12-21 13:16:58,303 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:58,303 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:58,303 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:16:58,303 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:58,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:58,304 INFO L85 PathProgramCache]: Analyzing trace with hash 716766725, now seen corresponding path program 1 times [2021-12-21 13:16:58,304 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:58,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [854865452] [2021-12-21 13:16:58,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:58,304 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:58,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:58,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:58,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:58,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-21 13:16:58,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,376 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:16:58,376 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:58,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [854865452] [2021-12-21 13:16:58,377 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [854865452] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:58,377 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:58,377 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:16:58,377 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1019930204] [2021-12-21 13:16:58,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:58,378 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:16:58,378 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:58,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:16:58,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:58,378 INFO L87 Difference]: Start difference. First operand 280 states and 351 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:58,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:58,551 INFO L93 Difference]: Finished difference Result 568 states and 723 transitions. [2021-12-21 13:16:58,552 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-21 13:16:58,552 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2021-12-21 13:16:58,552 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:58,554 INFO L225 Difference]: With dead ends: 568 [2021-12-21 13:16:58,554 INFO L226 Difference]: Without dead ends: 296 [2021-12-21 13:16:58,555 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:16:58,556 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 125 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:58,556 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 443 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:58,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2021-12-21 13:16:58,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 276. [2021-12-21 13:16:58,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 276 states, 211 states have (on average 1.2132701421800949) internal successors, (256), 222 states have internal predecessors, (256), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2021-12-21 13:16:58,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 276 states and 339 transitions. [2021-12-21 13:16:58,572 INFO L78 Accepts]: Start accepts. Automaton has 276 states and 339 transitions. Word has length 53 [2021-12-21 13:16:58,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:58,572 INFO L470 AbstractCegarLoop]: Abstraction has 276 states and 339 transitions. [2021-12-21 13:16:58,572 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:58,572 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 339 transitions. [2021-12-21 13:16:58,573 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-21 13:16:58,573 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:58,573 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:58,573 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:16:58,574 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:58,574 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:58,574 INFO L85 PathProgramCache]: Analyzing trace with hash -1754438647, now seen corresponding path program 1 times [2021-12-21 13:16:58,574 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:58,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [708396883] [2021-12-21 13:16:58,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:58,574 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:58,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:58,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 13:16:58,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:16:58,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-21 13:16:58,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,713 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:58,713 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:58,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [708396883] [2021-12-21 13:16:58,713 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [708396883] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:58,713 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:58,713 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-21 13:16:58,713 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [952091277] [2021-12-21 13:16:58,713 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:58,713 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-21 13:16:58,713 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:58,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-21 13:16:58,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:58,714 INFO L87 Difference]: Start difference. First operand 276 states and 339 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:59,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:59,343 INFO L93 Difference]: Finished difference Result 818 states and 1041 transitions. [2021-12-21 13:16:59,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-21 13:16:59,343 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2021-12-21 13:16:59,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:59,346 INFO L225 Difference]: With dead ends: 818 [2021-12-21 13:16:59,346 INFO L226 Difference]: Without dead ends: 600 [2021-12-21 13:16:59,347 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 199 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2021-12-21 13:16:59,348 INFO L933 BasicCegarLoop]: 153 mSDtfsCounter, 469 mSDsluCounter, 700 mSDsCounter, 0 mSdLazyCounter, 710 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 475 SdHoareTripleChecker+Valid, 853 SdHoareTripleChecker+Invalid, 864 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 710 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:59,348 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [475 Valid, 853 Invalid, 864 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 710 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-21 13:16:59,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 600 states. [2021-12-21 13:16:59,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 600 to 513. [2021-12-21 13:16:59,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 513 states, 394 states have (on average 1.2081218274111676) internal successors, (476), 416 states have internal predecessors, (476), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2021-12-21 13:16:59,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 513 states to 513 states and 622 transitions. [2021-12-21 13:16:59,372 INFO L78 Accepts]: Start accepts. Automaton has 513 states and 622 transitions. Word has length 55 [2021-12-21 13:16:59,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:59,372 INFO L470 AbstractCegarLoop]: Abstraction has 513 states and 622 transitions. [2021-12-21 13:16:59,372 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:59,372 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 622 transitions. [2021-12-21 13:16:59,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2021-12-21 13:16:59,373 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:59,373 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:59,373 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:16:59,373 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:59,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:59,374 INFO L85 PathProgramCache]: Analyzing trace with hash 1281558822, now seen corresponding path program 1 times [2021-12-21 13:16:59,374 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:59,374 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901850059] [2021-12-21 13:16:59,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:59,374 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:59,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:59,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:59,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:59,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:16:59,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-21 13:16:59,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2021-12-21 13:16:59,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:59,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-21 13:16:59,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,456 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 4 proven. 10 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2021-12-21 13:16:59,456 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:59,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901850059] [2021-12-21 13:16:59,457 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901850059] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:59,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1925049866] [2021-12-21 13:16:59,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:59,457 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:59,457 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:59,458 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:59,475 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:16:59,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:59,586 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:16:59,591 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:59,837 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:59,838 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:00,071 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-12-21 13:17:00,071 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1925049866] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:00,071 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:00,071 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 14 [2021-12-21 13:17:00,072 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238793757] [2021-12-21 13:17:00,072 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:00,073 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-12-21 13:17:00,073 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:00,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-12-21 13:17:00,073 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2021-12-21 13:17:00,073 INFO L87 Difference]: Start difference. First operand 513 states and 622 transitions. Second operand has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) [2021-12-21 13:17:00,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:00,883 INFO L93 Difference]: Finished difference Result 1141 states and 1423 transitions. [2021-12-21 13:17:00,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2021-12-21 13:17:00,883 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) Word has length 96 [2021-12-21 13:17:00,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:00,886 INFO L225 Difference]: With dead ends: 1141 [2021-12-21 13:17:00,886 INFO L226 Difference]: Without dead ends: 684 [2021-12-21 13:17:00,888 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 260 GetRequests, 216 SyntacticMatches, 1 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 436 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=421, Invalid=1559, Unknown=0, NotChecked=0, Total=1980 [2021-12-21 13:17:00,888 INFO L933 BasicCegarLoop]: 207 mSDtfsCounter, 450 mSDsluCounter, 1094 mSDsCounter, 0 mSdLazyCounter, 872 mSolverCounterSat, 190 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 453 SdHoareTripleChecker+Valid, 1301 SdHoareTripleChecker+Invalid, 1062 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 190 IncrementalHoareTripleChecker+Valid, 872 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:00,888 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [453 Valid, 1301 Invalid, 1062 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [190 Valid, 872 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-21 13:17:00,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 684 states. [2021-12-21 13:17:00,915 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 684 to 580. [2021-12-21 13:17:00,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 580 states, 442 states have (on average 1.2036199095022624) internal successors, (532), 471 states have internal predecessors, (532), 71 states have call successors, (71), 61 states have call predecessors, (71), 66 states have return successors, (91), 68 states have call predecessors, (91), 71 states have call successors, (91) [2021-12-21 13:17:00,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 580 states to 580 states and 694 transitions. [2021-12-21 13:17:00,917 INFO L78 Accepts]: Start accepts. Automaton has 580 states and 694 transitions. Word has length 96 [2021-12-21 13:17:00,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:00,918 INFO L470 AbstractCegarLoop]: Abstraction has 580 states and 694 transitions. [2021-12-21 13:17:00,918 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 9.142857142857142) internal successors, (128), 10 states have internal predecessors, (128), 5 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 5 states have call successors, (17) [2021-12-21 13:17:00,918 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 694 transitions. [2021-12-21 13:17:00,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-12-21 13:17:00,926 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:00,926 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:00,949 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:01,143 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-21 13:17:01,144 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:01,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:01,144 INFO L85 PathProgramCache]: Analyzing trace with hash -1223995222, now seen corresponding path program 1 times [2021-12-21 13:17:01,144 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:01,144 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1365446103] [2021-12-21 13:17:01,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:01,144 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:01,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:01,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:17:01,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:01,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:01,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-21 13:17:01,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:01,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-21 13:17:01,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:01,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2021-12-21 13:17:01,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:01,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-21 13:17:01,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 139 [2021-12-21 13:17:01,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2021-12-21 13:17:01,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-12-21 13:17:01,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,293 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 69 proven. 5 refuted. 0 times theorem prover too weak. 116 trivial. 0 not checked. [2021-12-21 13:17:01,293 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:01,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1365446103] [2021-12-21 13:17:01,293 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1365446103] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:01,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [517678416] [2021-12-21 13:17:01,293 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:01,293 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:01,293 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:01,294 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:01,295 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:17:01,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,405 INFO L263 TraceCheckSpWp]: Trace formula consists of 673 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-21 13:17:01,409 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:01,737 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 140 proven. 4 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-12-21 13:17:01,737 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:02,308 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 78 proven. 44 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2021-12-21 13:17:02,309 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [517678416] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:02,309 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:02,309 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 11] total 25 [2021-12-21 13:17:02,309 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1236453087] [2021-12-21 13:17:02,309 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:02,309 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2021-12-21 13:17:02,310 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:02,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2021-12-21 13:17:02,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=481, Unknown=0, NotChecked=0, Total=600 [2021-12-21 13:17:02,310 INFO L87 Difference]: Start difference. First operand 580 states and 694 transitions. Second operand has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) [2021-12-21 13:17:03,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:03,111 INFO L93 Difference]: Finished difference Result 1229 states and 1520 transitions. [2021-12-21 13:17:03,111 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-12-21 13:17:03,111 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) Word has length 172 [2021-12-21 13:17:03,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:03,112 INFO L225 Difference]: With dead ends: 1229 [2021-12-21 13:17:03,112 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:17:03,114 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 411 GetRequests, 362 SyntacticMatches, 3 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 428 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=487, Invalid=1769, Unknown=0, NotChecked=0, Total=2256 [2021-12-21 13:17:03,115 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 600 mSDsluCounter, 901 mSDsCounter, 0 mSdLazyCounter, 1094 mSolverCounterSat, 204 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 603 SdHoareTripleChecker+Valid, 1035 SdHoareTripleChecker+Invalid, 1298 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 204 IncrementalHoareTripleChecker+Valid, 1094 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:03,115 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [603 Valid, 1035 Invalid, 1298 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [204 Valid, 1094 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-21 13:17:03,115 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:17:03,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:17:03,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:17:03,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:17:03,116 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 172 [2021-12-21 13:17:03,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:03,116 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:17:03,116 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 8.6) internal successors, (215), 22 states have internal predecessors, (215), 9 states have call successors, (30), 9 states have call predecessors, (30), 10 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) [2021-12-21 13:17:03,116 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:17:03,116 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:17:03,118 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:17:03,135 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:03,331 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-21 13:17:03,333 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:17:07,731 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 92 98) no Hoare annotation was computed. [2021-12-21 13:17:07,732 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 92 98) the Hoare annotation is: true [2021-12-21 13:17:07,732 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 357 368) the Hoare annotation is: true [2021-12-21 13:17:07,732 INFO L858 garLoopResultBuilder]: For program point L361-1(lines 357 368) no Hoare annotation was computed. [2021-12-21 13:17:07,732 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 357 368) no Hoare annotation was computed. [2021-12-21 13:17:07,732 INFO L858 garLoopResultBuilder]: For program point L450-1(line 450) no Hoare annotation was computed. [2021-12-21 13:17:07,732 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 444 473) no Hoare annotation was computed. [2021-12-21 13:17:07,732 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 444 473) the Hoare annotation is: true [2021-12-21 13:17:07,732 INFO L861 garLoopResultBuilder]: At program point L469(lines 444 473) the Hoare annotation is: true [2021-12-21 13:17:07,732 INFO L858 garLoopResultBuilder]: For program point L465(line 465) no Hoare annotation was computed. [2021-12-21 13:17:07,732 INFO L858 garLoopResultBuilder]: For program point L458(lines 458 462) no Hoare annotation was computed. [2021-12-21 13:17:07,732 INFO L861 garLoopResultBuilder]: At program point L458-1(lines 458 462) the Hoare annotation is: true [2021-12-21 13:17:07,733 INFO L858 garLoopResultBuilder]: For program point L455(line 455) no Hoare annotation was computed. [2021-12-21 13:17:07,733 INFO L861 garLoopResultBuilder]: At program point L454-2(lines 454 468) the Hoare annotation is: true [2021-12-21 13:17:07,733 INFO L861 garLoopResultBuilder]: At program point L450(line 450) the Hoare annotation is: true [2021-12-21 13:17:07,733 INFO L858 garLoopResultBuilder]: For program point L337(lines 337 341) no Hoare annotation was computed. [2021-12-21 13:17:07,733 INFO L858 garLoopResultBuilder]: For program point L977(lines 977 983) no Hoare annotation was computed. [2021-12-21 13:17:07,733 INFO L854 garLoopResultBuilder]: At program point L337-2(lines 333 344) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse7)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5)))) [2021-12-21 13:17:07,733 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 65 91) no Hoare annotation was computed. [2021-12-21 13:17:07,733 INFO L854 garLoopResultBuilder]: At program point L164(lines 159 166) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse9 (= 1 ~systemActive~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (and .cse8 .cse1 .cse2 (<= ~waterLevel~0 1) .cse9 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse9)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2 (= ~waterLevel~0 1) .cse3) .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse4 .cse7) (or (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse6 .cse0 .cse4 .cse5 .cse7) (or .cse8 .cse0 .cse5)))) [2021-12-21 13:17:07,733 INFO L854 garLoopResultBuilder]: At program point L961(lines 954 963) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse4 (not (= |old(~waterLevel~0)| 2))) (or .cse3 .cse1 .cse4 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-21 13:17:07,733 INFO L858 garLoopResultBuilder]: For program point L251(lines 251 255) no Hoare annotation was computed. [2021-12-21 13:17:07,733 INFO L858 garLoopResultBuilder]: For program point L251-2(lines 251 255) no Hoare annotation was computed. [2021-12-21 13:17:07,733 INFO L854 garLoopResultBuilder]: At program point L974(line 974) the Hoare annotation is: (let ((.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse11 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse17 (<= ~waterLevel~0 1)) (.cse15 (= 1 ~systemActive~0)) (.cse18 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse19 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))) (let ((.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (and .cse16 .cse6 .cse7 .cse11 .cse17 .cse15 .cse18 .cse13 .cse19)) (.cse8 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse14 .cse16 .cse17 .cse15 .cse18 .cse13 .cse19)) (.cse1 (not .cse15)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2)) .cse4) (or .cse5 .cse6 .cse1 (and .cse7 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2) .cse8 .cse9)) (or .cse6 .cse1 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse12 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|)))) (or .cse5 .cse0 .cse1 .cse2 (and .cse7 .cse11 .cse8 .cse12 .cse9 .cse13) (and .cse14 .cse8 .cse12 .cse9 .cse13) .cse3 .cse4)) (or .cse1 .cse2 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse10)))) [2021-12-21 13:17:07,733 INFO L854 garLoopResultBuilder]: At program point L429(lines 424 432) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse7)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5)))) [2021-12-21 13:17:07,733 INFO L858 garLoopResultBuilder]: For program point L974-1(line 974) no Hoare annotation was computed. [2021-12-21 13:17:07,733 INFO L854 garLoopResultBuilder]: At program point L140(line 140) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse7)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5)))) [2021-12-21 13:17:07,733 INFO L858 garLoopResultBuilder]: For program point L438(line 438) no Hoare annotation was computed. [2021-12-21 13:17:07,734 INFO L854 garLoopResultBuilder]: At program point L145(line 145) the Hoare annotation is: (let ((.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse1) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-21 13:17:07,734 INFO L854 garLoopResultBuilder]: At program point L145-1(lines 126 150) the Hoare annotation is: (let ((.cse13 (<= 1 ~pumpRunning~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse15 (<= ~waterLevel~0 1)) (.cse14 (= 1 ~systemActive~0)) (.cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse8 (and .cse11 .cse1 .cse2 .cse15 .cse14 .cse16 .cse4)) (.cse0 (not .cse14)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (and .cse13 .cse6 .cse15 .cse14 .cse16 .cse4)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 .cse2 .cse3 .cse4) .cse5 (not (< 1 |old(~waterLevel~0)|)) (and .cse6 .cse3 .cse4) .cse7)) (or (not (= |old(~waterLevel~0)| 1)) .cse8 .cse0 .cse5 .cse9 .cse10) (or .cse11 (and .cse1 .cse12) .cse0 .cse7 (and .cse13 (= 2 ~waterLevel~0) .cse12)) (or (and .cse6 .cse12 .cse4) .cse8 .cse0 .cse5 (and .cse11 .cse1 .cse2 .cse14 .cse12 .cse4) .cse9 .cse7 .cse10)))) [2021-12-21 13:17:07,734 INFO L858 garLoopResultBuilder]: For program point L79-1(lines 79 85) no Hoare annotation was computed. [2021-12-21 13:17:07,734 INFO L854 garLoopResultBuilder]: At program point L257(lines 242 260) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 1 ~systemActive~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and (<= 1 ~pumpRunning~0) .cse2 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse7)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse0 .cse1 .cse5 .cse6) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse4)))) [2021-12-21 13:17:07,734 INFO L854 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse5)))) [2021-12-21 13:17:07,734 INFO L858 garLoopResultBuilder]: For program point L959-1(line 959) no Hoare annotation was computed. [2021-12-21 13:17:07,734 INFO L854 garLoopResultBuilder]: At program point L439(lines 434 441) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2021-12-21 13:17:07,734 INFO L854 garLoopResultBuilder]: At program point L406(lines 401 409) the Hoare annotation is: (let ((.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse19 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse14 (= 1 ~systemActive~0)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (and .cse19 .cse7 .cse0 .cse16 .cse14 .cse20 .cse4)) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (and .cse0 .cse12 .cse1 .cse2 .cse16 .cse14 .cse20 .cse4)) (.cse5 (not .cse14)) (.cse13 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) .cse5 .cse6 (not (< 1 |old(~waterLevel~0)|)) (and .cse7 .cse0 .cse3 .cse4) .cse8)) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6 .cse9 .cse10 .cse11) (or (and .cse12 .cse1 .cse2 .cse13 .cse14 .cse15 .cse4) .cse5 .cse6 .cse9 (and .cse7 .cse13 .cse15 .cse4) .cse8 .cse10 .cse11) (let ((.cse17 (= 2 ~waterLevel~0)) (.cse18 (= 2 |timeShift_getWaterLevel_#res#1|))) (or .cse12 .cse5 (and .cse1 .cse13 .cse16 .cse15) (and .cse1 .cse17 .cse18 .cse15) .cse8 (and .cse19 .cse17 .cse18 .cse15)))))) [2021-12-21 13:17:07,734 INFO L858 garLoopResultBuilder]: For program point L976(lines 976 986) no Hoare annotation was computed. [2021-12-21 13:17:07,734 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 65 91) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse5)))) [2021-12-21 13:17:07,734 INFO L858 garLoopResultBuilder]: For program point L972(lines 972 989) no Hoare annotation was computed. [2021-12-21 13:17:07,734 INFO L854 garLoopResultBuilder]: At program point L972-1(lines 964 992) the Hoare annotation is: (let ((.cse19 (<= 1 ~pumpRunning~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (not (= |timeShift_processEnvironment_~tmp~1#1| 0))) (.cse22 (<= ~waterLevel~0 1)) (.cse5 (= 1 ~systemActive~0)) (.cse23 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))) (let ((.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (and .cse3 .cse4 .cse9 .cse10 .cse22 .cse5 .cse23 .cse7 .cse8)) (.cse0 (not .cse5)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse17 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|))) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (and .cse19 .cse2 .cse3 .cse4 .cse22 .cse5 .cse23 .cse7 .cse8)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (let ((.cse6 (= ~waterLevel~0 1))) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse3 .cse4 .cse9 .cse10 .cse5 .cse6 .cse7 .cse8) .cse11)) (or .cse12 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse13 .cse14) (or .cse15 .cse4 .cse0 (and .cse9 .cse16 .cse17 .cse18)) (let ((.cse20 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse21 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2))) (or .cse4 (and .cse19 .cse20 .cse18 .cse21) .cse0 (and .cse9 .cse20 .cse18 .cse21) .cse11 (not (<= 2 |old(~waterLevel~0)|)))) (or .cse15 .cse12 .cse0 .cse1 (and .cse4 .cse9 .cse10 .cse16 .cse5 .cse17 .cse18 .cse7) (and .cse2 .cse4 .cse16 .cse5 .cse17 .cse18 .cse7) .cse13 .cse14)))) [2021-12-21 13:17:07,734 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 91) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 438) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point L72(lines 72 78) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point L72-2(lines 68 90) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point L134(lines 134 142) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point L130(lines 130 147) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L854 garLoopResultBuilder]: At program point L287(line 287) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse4 .cse5 .cse2 .cse3) (and .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3))) [2021-12-21 13:17:07,735 INFO L861 garLoopResultBuilder]: At program point L539(lines 520 542) the Hoare annotation is: true [2021-12-21 13:17:07,735 INFO L854 garLoopResultBuilder]: At program point L502(lines 498 504) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:07,735 INFO L854 garLoopResultBuilder]: At program point L321(lines 274 322) the Hoare annotation is: false [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point L276(lines 275 320) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point L305(lines 305 316) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L854 garLoopResultBuilder]: At program point L297(line 297) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-21 13:17:07,735 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:17:07,735 INFO L854 garLoopResultBuilder]: At program point L574(lines 569 577) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:07,735 INFO L854 garLoopResultBuilder]: At program point L318(lines 275 320) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse4 .cse5 .cse2 .cse3) (and .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3))) [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L285(lines 285 291) no Hoare annotation was computed. [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L285-1(lines 285 291) no Hoare annotation was computed. [2021-12-21 13:17:07,736 INFO L854 garLoopResultBuilder]: At program point L566(lines 562 568) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L277(lines 277 281) no Hoare annotation was computed. [2021-12-21 13:17:07,736 INFO L854 garLoopResultBuilder]: At program point L951(lines 946 953) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L311(lines 311 315) no Hoare annotation was computed. [2021-12-21 13:17:07,736 INFO L854 garLoopResultBuilder]: At program point L311-2(lines 305 316) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L530(lines 530 537) no Hoare annotation was computed. [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L530-2(lines 530 537) no Hoare annotation was computed. [2021-12-21 13:17:07,736 INFO L854 garLoopResultBuilder]: At program point L559(lines 555 561) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L295(lines 295 301) no Hoare annotation was computed. [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L295-1(lines 295 301) no Hoare annotation was computed. [2021-12-21 13:17:07,736 INFO L861 garLoopResultBuilder]: At program point L324(lines 265 328) the Hoare annotation is: true [2021-12-21 13:17:07,736 INFO L861 garLoopResultBuilder]: At program point L514(lines 506 516) the Hoare annotation is: true [2021-12-21 13:17:07,736 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 100 124) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (= 2 ~waterLevel~0))))) [2021-12-21 13:17:07,736 INFO L854 garLoopResultBuilder]: At program point L114(line 114) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:07,736 INFO L854 garLoopResultBuilder]: At program point L238(lines 223 241) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 1)))) (and (or (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= ~waterLevel~0 2))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L108(lines 108 116) no Hoare annotation was computed. [2021-12-21 13:17:07,736 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 121) no Hoare annotation was computed. [2021-12-21 13:17:07,737 INFO L858 garLoopResultBuilder]: For program point L232(lines 232 236) no Hoare annotation was computed. [2021-12-21 13:17:07,737 INFO L858 garLoopResultBuilder]: For program point L232-2(lines 232 236) no Hoare annotation was computed. [2021-12-21 13:17:07,737 INFO L858 garLoopResultBuilder]: For program point L414(lines 414 420) no Hoare annotation was computed. [2021-12-21 13:17:07,737 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 158) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:07,737 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 100 124) no Hoare annotation was computed. [2021-12-21 13:17:07,737 INFO L854 garLoopResultBuilder]: At program point L119(line 119) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:17:07,737 INFO L858 garLoopResultBuilder]: For program point L119-1(lines 100 124) no Hoare annotation was computed. [2021-12-21 13:17:07,737 INFO L854 garLoopResultBuilder]: At program point L419(lines 410 423) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (and .cse1 (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:07,737 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 345 356) no Hoare annotation was computed. [2021-12-21 13:17:07,737 INFO L858 garLoopResultBuilder]: For program point L349-1(lines 345 356) no Hoare annotation was computed. [2021-12-21 13:17:07,737 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 345 356) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse0 .cse2 (not (<= |old(~waterLevel~0)| 2))))) [2021-12-21 13:17:07,737 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 178 186) no Hoare annotation was computed. [2021-12-21 13:17:07,737 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 178 186) the Hoare annotation is: true [2021-12-21 13:17:07,737 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 178 186) no Hoare annotation was computed. [2021-12-21 13:17:07,739 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:07,740 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:17:07,771 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:17:07 BoogieIcfgContainer [2021-12-21 13:17:07,771 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:17:07,771 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:17:07,771 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:17:07,771 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:17:07,772 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:56" (3/4) ... [2021-12-21 13:17:07,774 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:17:07,777 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:17:07,777 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:17:07,777 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:17:07,777 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:17:07,778 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:17:07,778 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:17:07,778 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-21 13:17:07,782 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-12-21 13:17:07,783 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:17:07,784 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:17:07,784 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:17:07,784 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:17:07,784 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:07,785 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:07,800 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:07,801 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:17:07,801 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(\old(waterLevel) <= 2)) && (((((((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && !(2 <= tmp)) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 == systemActive)) || (((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && !(2 <= tmp)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \result < 2) && 1 == systemActive) && !(2 <= tmp)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:07,802 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:07,802 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:17:07,802 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((\result <= waterLevel && pumpRunning == 0) && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) [2021-12-21 13:17:07,802 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:17:07,802 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2021-12-21 13:17:07,803 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:17:07,803 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\result == 0 && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2021-12-21 13:17:07,803 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:17:07,803 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2021-12-21 13:17:07,830 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:17:07,830 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:17:07,831 INFO L158 Benchmark]: Toolchain (without parser) took 11903.99ms. Allocated memory was 96.5MB in the beginning and 172.0MB in the end (delta: 75.5MB). Free memory was 68.1MB in the beginning and 54.1MB in the end (delta: 14.0MB). Peak memory consumption was 88.4MB. Max. memory is 16.1GB. [2021-12-21 13:17:07,831 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 96.5MB. Free memory was 56.3MB in the beginning and 56.2MB in the end (delta: 40.9kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:17:07,831 INFO L158 Benchmark]: CACSL2BoogieTranslator took 411.87ms. Allocated memory was 96.5MB in the beginning and 117.4MB in the end (delta: 21.0MB). Free memory was 67.8MB in the beginning and 85.9MB in the end (delta: -18.1MB). Peak memory consumption was 11.2MB. Max. memory is 16.1GB. [2021-12-21 13:17:07,831 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.08ms. Allocated memory is still 117.4MB. Free memory was 85.9MB in the beginning and 83.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:17:07,832 INFO L158 Benchmark]: Boogie Preprocessor took 18.80ms. Allocated memory is still 117.4MB. Free memory was 83.4MB in the beginning and 81.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:17:07,832 INFO L158 Benchmark]: RCFGBuilder took 388.07ms. Allocated memory is still 117.4MB. Free memory was 81.7MB in the beginning and 65.4MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-21 13:17:07,832 INFO L158 Benchmark]: TraceAbstraction took 10967.20ms. Allocated memory was 117.4MB in the beginning and 172.0MB in the end (delta: 54.5MB). Free memory was 64.5MB in the beginning and 61.4MB in the end (delta: 3.1MB). Peak memory consumption was 73.9MB. Max. memory is 16.1GB. [2021-12-21 13:17:07,833 INFO L158 Benchmark]: Witness Printer took 59.21ms. Allocated memory is still 172.0MB. Free memory was 61.4MB in the beginning and 54.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:17:07,834 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 96.5MB. Free memory was 56.3MB in the beginning and 56.2MB in the end (delta: 40.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 411.87ms. Allocated memory was 96.5MB in the beginning and 117.4MB in the end (delta: 21.0MB). Free memory was 67.8MB in the beginning and 85.9MB in the end (delta: -18.1MB). Peak memory consumption was 11.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.08ms. Allocated memory is still 117.4MB. Free memory was 85.9MB in the beginning and 83.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.80ms. Allocated memory is still 117.4MB. Free memory was 83.4MB in the beginning and 81.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 388.07ms. Allocated memory is still 117.4MB. Free memory was 81.7MB in the beginning and 65.4MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 10967.20ms. Allocated memory was 117.4MB in the beginning and 172.0MB in the end (delta: 54.5MB). Free memory was 64.5MB in the beginning and 61.4MB in the end (delta: 3.1MB). Peak memory consumption was 73.9MB. Max. memory is 16.1GB. * Witness Printer took 59.21ms. Allocated memory is still 172.0MB. Free memory was 61.4MB in the beginning and 54.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 438]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 92 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.9s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2368 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2326 mSDsluCounter, 5405 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4020 mSDsCounter, 728 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3311 IncrementalHoareTripleChecker+Invalid, 4039 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 728 mSolverCounterUnsat, 1385 mSDtfsCounter, 3311 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 819 GetRequests, 655 SyntacticMatches, 6 SemanticMatches, 158 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1095 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=580occurred in iteration=10, InterpolantAutomatonStates: 139, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 253 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 1395 PreInvPairs, 1661 NumberOfFragments, 2742 HoareAnnotationTreeSize, 1395 FomulaSimplifications, 4812 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 42 FomulaSimplificationsInter, 22388 FormulaSimplificationTreeSizeReductionInter, 3.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 956 NumberOfCodeBlocks, 956 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1209 ConstructedInterpolants, 0 QuantifiedInterpolants, 2424 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1145 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 616/696 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 520]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 401]: Loop Invariant Derived loop invariant: (((((((((((\result <= waterLevel && pumpRunning == 0) && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 223]: Loop Invariant Derived loop invariant: (((((\result == 0 && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 242]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 562]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 424]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 454]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(\old(waterLevel) <= 2)) && (((((((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && !(2 <= tmp)) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 == systemActive)) || (((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && \result < 2) && 1 == systemActive) && !(2 <= tmp)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \result < 2) && 1 == systemActive) && !(2 <= tmp)) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 333]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || (((pumpRunning == 0 && !(tmp == 0)) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && !(tmp == 0)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:17:07,878 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE