./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:17:01,833 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:17:01,835 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:17:01,878 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:17:01,896 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:17:01,898 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:17:01,900 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:17:01,904 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:17:01,906 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:17:01,908 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:17:01,908 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:17:01,910 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:17:01,912 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:17:01,914 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:17:01,916 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:17:01,917 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:17:01,918 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:17:01,922 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:17:01,923 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:17:01,925 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:17:01,926 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:17:01,927 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:17:01,928 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:17:01,929 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:17:01,931 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:17:01,931 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:17:01,931 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:17:01,932 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:17:01,932 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:17:01,933 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:17:01,933 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:17:01,934 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:17:01,935 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:17:01,935 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:17:01,936 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:17:01,937 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:17:01,937 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:17:01,937 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:17:01,938 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:17:01,938 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:17:01,939 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:17:01,940 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:17:01,974 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:17:01,975 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:17:01,977 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:17:01,977 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:17:01,978 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:17:01,978 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:17:01,979 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:17:01,979 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:17:01,979 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:17:01,979 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:17:01,980 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:17:01,981 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:17:01,981 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:17:01,981 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:17:01,981 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:17:01,981 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:17:01,982 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:17:01,982 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:17:01,982 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:17:01,982 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:17:01,982 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:17:01,983 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:17:01,983 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:17:01,983 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:17:01,983 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:17:01,984 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:17:01,984 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:17:01,984 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:17:01,984 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:17:01,984 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:17:01,985 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:17:01,985 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:17:01,985 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:17:01,985 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:17:01,986 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c [2021-12-21 13:17:02,228 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:17:02,252 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:17:02,255 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:17:02,256 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:17:02,256 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:17:02,257 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2021-12-21 13:17:02,307 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fa60967c0/b9603e4ff5be4a8283e23b8b5966d2e9/FLAG17c5379f7 [2021-12-21 13:17:02,817 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:17:02,820 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2021-12-21 13:17:02,837 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fa60967c0/b9603e4ff5be4a8283e23b8b5966d2e9/FLAG17c5379f7 [2021-12-21 13:17:03,303 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fa60967c0/b9603e4ff5be4a8283e23b8b5966d2e9 [2021-12-21 13:17:03,305 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:17:03,307 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:17:03,311 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:17:03,312 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:17:03,315 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:17:03,316 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,317 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@28964872 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03, skipping insertion in model container [2021-12-21 13:17:03,318 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,323 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:17:03,356 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:17:03,603 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2021-12-21 13:17:03,652 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:17:03,668 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:17:03,708 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2021-12-21 13:17:03,725 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:17:03,740 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:17:03,740 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03 WrapperNode [2021-12-21 13:17:03,741 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:17:03,742 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:17:03,742 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:17:03,742 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:17:03,749 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,772 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,813 INFO L137 Inliner]: procedures = 59, calls = 163, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 291 [2021-12-21 13:17:03,815 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:17:03,818 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:17:03,818 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:17:03,818 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:17:03,825 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,825 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,839 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,840 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,845 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,865 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,867 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,869 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:17:03,870 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:17:03,870 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:17:03,870 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:17:03,871 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (1/1) ... [2021-12-21 13:17:03,881 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:17:03,892 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:03,913 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:17:03,934 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:17:03,952 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:17:03,953 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:17:03,953 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:17:03,953 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:17:03,953 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:17:03,953 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:17:03,953 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:17:03,954 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:17:03,954 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:17:03,954 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:17:03,954 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:17:03,954 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-21 13:17:03,954 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-21 13:17:03,955 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-21 13:17:03,955 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-21 13:17:03,955 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-21 13:17:03,955 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-21 13:17:03,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:17:03,955 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:17:03,956 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:17:03,956 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:17:03,956 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:17:04,024 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:17:04,026 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:17:04,384 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:17:04,391 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:17:04,400 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:17:04,403 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:17:04 BoogieIcfgContainer [2021-12-21 13:17:04,403 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:17:04,404 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:17:04,405 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:17:04,409 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:17:04,411 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:17:03" (1/3) ... [2021-12-21 13:17:04,412 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76e73abf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:17:04, skipping insertion in model container [2021-12-21 13:17:04,412 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:03" (2/3) ... [2021-12-21 13:17:04,412 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76e73abf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:17:04, skipping insertion in model container [2021-12-21 13:17:04,412 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:17:04" (3/3) ... [2021-12-21 13:17:04,413 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product55.cil.c [2021-12-21 13:17:04,418 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:17:04,418 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:17:04,472 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:17:04,480 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:17:04,480 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:17:04,513 INFO L276 IsEmpty]: Start isEmpty. Operand has 109 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-21 13:17:04,522 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-21 13:17:04,522 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:04,523 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:04,524 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:04,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:04,529 INFO L85 PathProgramCache]: Analyzing trace with hash 158818465, now seen corresponding path program 1 times [2021-12-21 13:17:04,536 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:04,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [129225905] [2021-12-21 13:17:04,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:04,537 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:04,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:04,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-21 13:17:04,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:04,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:17:04,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:04,811 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:04,812 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:04,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [129225905] [2021-12-21 13:17:04,813 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [129225905] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:04,814 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:04,814 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:17:04,815 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [205373292] [2021-12-21 13:17:04,816 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:04,822 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:17:04,822 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:04,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:17:04,852 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:17:04,855 INFO L87 Difference]: Start difference. First operand has 109 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:17:04,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:04,906 INFO L93 Difference]: Finished difference Result 209 states and 284 transitions. [2021-12-21 13:17:04,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:17:04,908 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-21 13:17:04,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:04,919 INFO L225 Difference]: With dead ends: 209 [2021-12-21 13:17:04,919 INFO L226 Difference]: Without dead ends: 100 [2021-12-21 13:17:04,925 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:17:04,930 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:04,931 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:17:04,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2021-12-21 13:17:04,977 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2021-12-21 13:17:04,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-21 13:17:04,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 130 transitions. [2021-12-21 13:17:04,986 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 130 transitions. Word has length 32 [2021-12-21 13:17:04,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:04,987 INFO L470 AbstractCegarLoop]: Abstraction has 100 states and 130 transitions. [2021-12-21 13:17:04,987 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:17:04,988 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 130 transitions. [2021-12-21 13:17:04,994 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-21 13:17:04,995 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:04,995 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:04,995 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:17:04,996 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:04,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:04,997 INFO L85 PathProgramCache]: Analyzing trace with hash -1314152562, now seen corresponding path program 1 times [2021-12-21 13:17:04,998 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:04,998 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1653745796] [2021-12-21 13:17:04,998 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:04,998 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:05,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:17:05,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:17:05,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,122 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:05,122 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:05,122 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1653745796] [2021-12-21 13:17:05,122 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1653745796] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:05,123 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:05,123 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:17:05,123 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1308295911] [2021-12-21 13:17:05,123 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:05,134 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:17:05,135 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:05,135 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:17:05,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:17:05,136 INFO L87 Difference]: Start difference. First operand 100 states and 130 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:17:05,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:05,152 INFO L93 Difference]: Finished difference Result 161 states and 209 transitions. [2021-12-21 13:17:05,152 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:17:05,153 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-21 13:17:05,154 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:05,160 INFO L225 Difference]: With dead ends: 161 [2021-12-21 13:17:05,161 INFO L226 Difference]: Without dead ends: 91 [2021-12-21 13:17:05,166 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:17:05,167 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 16 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:05,168 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 213 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:17:05,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2021-12-21 13:17:05,178 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2021-12-21 13:17:05,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 78 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-21 13:17:05,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 118 transitions. [2021-12-21 13:17:05,180 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 118 transitions. Word has length 33 [2021-12-21 13:17:05,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:05,180 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 118 transitions. [2021-12-21 13:17:05,181 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:17:05,181 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 118 transitions. [2021-12-21 13:17:05,182 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-12-21 13:17:05,182 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:05,182 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:05,182 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:17:05,182 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:05,183 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:05,183 INFO L85 PathProgramCache]: Analyzing trace with hash -1623741410, now seen corresponding path program 1 times [2021-12-21 13:17:05,183 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:05,183 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2082068261] [2021-12-21 13:17:05,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:05,184 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:05,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:17:05,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-21 13:17:05,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,264 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:05,265 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:05,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2082068261] [2021-12-21 13:17:05,265 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2082068261] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:05,265 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:05,266 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:17:05,266 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1324855548] [2021-12-21 13:17:05,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:05,266 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:17:05,267 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:05,267 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:17:05,267 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:17:05,267 INFO L87 Difference]: Start difference. First operand 91 states and 118 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:17:05,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:05,299 INFO L93 Difference]: Finished difference Result 256 states and 338 transitions. [2021-12-21 13:17:05,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:17:05,300 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-12-21 13:17:05,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:05,302 INFO L225 Difference]: With dead ends: 256 [2021-12-21 13:17:05,304 INFO L226 Difference]: Without dead ends: 173 [2021-12-21 13:17:05,304 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:17:05,306 INFO L933 BasicCegarLoop]: 145 mSDtfsCounter, 93 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:05,308 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [93 Valid, 252 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:17:05,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2021-12-21 13:17:05,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 170. [2021-12-21 13:17:05,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 170 states, 125 states have (on average 1.344) internal successors, (168), 144 states have internal predecessors, (168), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2021-12-21 13:17:05,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 170 states to 170 states and 224 transitions. [2021-12-21 13:17:05,332 INFO L78 Accepts]: Start accepts. Automaton has 170 states and 224 transitions. Word has length 37 [2021-12-21 13:17:05,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:05,332 INFO L470 AbstractCegarLoop]: Abstraction has 170 states and 224 transitions. [2021-12-21 13:17:05,332 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:17:05,332 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 224 transitions. [2021-12-21 13:17:05,334 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-21 13:17:05,334 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:05,334 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:05,335 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:17:05,335 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:05,335 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:05,335 INFO L85 PathProgramCache]: Analyzing trace with hash 1317125140, now seen corresponding path program 1 times [2021-12-21 13:17:05,336 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:05,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1139778112] [2021-12-21 13:17:05,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:05,336 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:05,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 13:17:05,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-21 13:17:05,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,429 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:17:05,430 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:05,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1139778112] [2021-12-21 13:17:05,430 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1139778112] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:05,430 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:05,430 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:17:05,431 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [631139165] [2021-12-21 13:17:05,431 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:05,432 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:17:05,432 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:05,432 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:17:05,433 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:17:05,433 INFO L87 Difference]: Start difference. First operand 170 states and 224 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:17:05,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:05,585 INFO L93 Difference]: Finished difference Result 442 states and 599 transitions. [2021-12-21 13:17:05,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:17:05,586 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-21 13:17:05,586 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:05,591 INFO L225 Difference]: With dead ends: 442 [2021-12-21 13:17:05,592 INFO L226 Difference]: Without dead ends: 280 [2021-12-21 13:17:05,592 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:17:05,601 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 56 mSDsluCounter, 434 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 567 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:05,602 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 567 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:17:05,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2021-12-21 13:17:05,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 267. [2021-12-21 13:17:05,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 198 states have (on average 1.292929292929293) internal successors, (256), 215 states have internal predecessors, (256), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2021-12-21 13:17:05,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 344 transitions. [2021-12-21 13:17:05,632 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 344 transitions. Word has length 41 [2021-12-21 13:17:05,632 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:05,632 INFO L470 AbstractCegarLoop]: Abstraction has 267 states and 344 transitions. [2021-12-21 13:17:05,632 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:17:05,633 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 344 transitions. [2021-12-21 13:17:05,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:17:05,636 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:05,637 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:05,637 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:17:05,637 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:05,637 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:05,637 INFO L85 PathProgramCache]: Analyzing trace with hash -1401707673, now seen corresponding path program 1 times [2021-12-21 13:17:05,638 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:05,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [176533663] [2021-12-21 13:17:05,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:05,638 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:05,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:17:05,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:17:05,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:05,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-21 13:17:05,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,770 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:05,771 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:05,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [176533663] [2021-12-21 13:17:05,771 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [176533663] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:05,771 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:05,771 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:17:05,771 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625047501] [2021-12-21 13:17:05,771 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:05,772 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:17:05,772 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:05,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:17:05,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:17:05,773 INFO L87 Difference]: Start difference. First operand 267 states and 344 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:17:05,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:05,927 INFO L93 Difference]: Finished difference Result 594 states and 777 transitions. [2021-12-21 13:17:05,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:17:05,928 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-12-21 13:17:05,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:05,933 INFO L225 Difference]: With dead ends: 594 [2021-12-21 13:17:05,933 INFO L226 Difference]: Without dead ends: 335 [2021-12-21 13:17:05,934 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:17:05,935 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 74 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 456 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:05,935 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 456 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:17:05,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2021-12-21 13:17:05,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 327. [2021-12-21 13:17:05,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 244 states have (on average 1.2704918032786885) internal successors, (310), 261 states have internal predecessors, (310), 42 states have call successors, (42), 30 states have call predecessors, (42), 40 states have return successors, (64), 45 states have call predecessors, (64), 42 states have call successors, (64) [2021-12-21 13:17:05,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 416 transitions. [2021-12-21 13:17:05,958 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 416 transitions. Word has length 56 [2021-12-21 13:17:05,959 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:05,959 INFO L470 AbstractCegarLoop]: Abstraction has 327 states and 416 transitions. [2021-12-21 13:17:05,959 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:17:05,959 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 416 transitions. [2021-12-21 13:17:05,960 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:17:05,960 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:05,960 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:05,960 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:17:05,961 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:05,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:05,961 INFO L85 PathProgramCache]: Analyzing trace with hash -979005847, now seen corresponding path program 1 times [2021-12-21 13:17:05,961 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:05,961 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1137047049] [2021-12-21 13:17:05,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:05,961 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:05,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:17:06,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:17:06,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:06,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-21 13:17:06,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,070 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:06,070 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:06,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1137047049] [2021-12-21 13:17:06,071 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1137047049] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:06,071 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:06,071 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:17:06,071 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1256856336] [2021-12-21 13:17:06,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:06,072 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:17:06,072 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:06,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:17:06,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:17:06,073 INFO L87 Difference]: Start difference. First operand 327 states and 416 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:17:06,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:06,329 INFO L93 Difference]: Finished difference Result 670 states and 875 transitions. [2021-12-21 13:17:06,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 13:17:06,330 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-21 13:17:06,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:06,332 INFO L225 Difference]: With dead ends: 670 [2021-12-21 13:17:06,332 INFO L226 Difference]: Without dead ends: 351 [2021-12-21 13:17:06,333 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-21 13:17:06,334 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 230 mSDsluCounter, 380 mSDsCounter, 0 mSdLazyCounter, 181 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 237 SdHoareTripleChecker+Valid, 513 SdHoareTripleChecker+Invalid, 243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:06,334 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [237 Valid, 513 Invalid, 243 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 181 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:17:06,335 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2021-12-21 13:17:06,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 331. [2021-12-21 13:17:06,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 248 states have (on average 1.2661290322580645) internal successors, (314), 265 states have internal predecessors, (314), 42 states have call successors, (42), 30 states have call predecessors, (42), 40 states have return successors, (64), 45 states have call predecessors, (64), 42 states have call successors, (64) [2021-12-21 13:17:06,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 420 transitions. [2021-12-21 13:17:06,372 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 420 transitions. Word has length 56 [2021-12-21 13:17:06,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:06,372 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 420 transitions. [2021-12-21 13:17:06,373 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:17:06,373 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 420 transitions. [2021-12-21 13:17:06,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:17:06,374 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:06,374 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:06,375 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:17:06,375 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:06,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:06,375 INFO L85 PathProgramCache]: Analyzing trace with hash 1510523115, now seen corresponding path program 1 times [2021-12-21 13:17:06,375 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:06,376 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1861986124] [2021-12-21 13:17:06,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:06,376 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:06,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:17:06,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:17:06,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:06,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-21 13:17:06,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,464 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:06,465 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:06,465 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1861986124] [2021-12-21 13:17:06,465 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1861986124] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:06,465 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:06,465 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:17:06,465 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1734746884] [2021-12-21 13:17:06,465 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:06,466 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:17:06,466 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:06,466 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:17:06,466 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:17:06,466 INFO L87 Difference]: Start difference. First operand 331 states and 420 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:17:06,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:06,707 INFO L93 Difference]: Finished difference Result 946 states and 1245 transitions. [2021-12-21 13:17:06,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:17:06,711 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-21 13:17:06,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:06,715 INFO L225 Difference]: With dead ends: 946 [2021-12-21 13:17:06,715 INFO L226 Difference]: Without dead ends: 623 [2021-12-21 13:17:06,717 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:17:06,717 INFO L933 BasicCegarLoop]: 166 mSDtfsCounter, 242 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 249 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:06,717 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [249 Valid, 381 Invalid, 253 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:17:06,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 623 states. [2021-12-21 13:17:06,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 623 to 616. [2021-12-21 13:17:06,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 616 states, 459 states have (on average 1.2287581699346406) internal successors, (564), 485 states have internal predecessors, (564), 83 states have call successors, (83), 67 states have call predecessors, (83), 73 states have return successors, (135), 84 states have call predecessors, (135), 83 states have call successors, (135) [2021-12-21 13:17:06,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 616 states to 616 states and 782 transitions. [2021-12-21 13:17:06,752 INFO L78 Accepts]: Start accepts. Automaton has 616 states and 782 transitions. Word has length 56 [2021-12-21 13:17:06,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:06,753 INFO L470 AbstractCegarLoop]: Abstraction has 616 states and 782 transitions. [2021-12-21 13:17:06,753 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:17:06,753 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 782 transitions. [2021-12-21 13:17:06,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-21 13:17:06,754 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:06,755 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:06,755 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:17:06,755 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:06,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:06,755 INFO L85 PathProgramCache]: Analyzing trace with hash -193074427, now seen corresponding path program 1 times [2021-12-21 13:17:06,755 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:06,756 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1425219925] [2021-12-21 13:17:06,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:06,756 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:06,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:06,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 13:17:06,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:17:06,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:06,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-21 13:17:06,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:06,922 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:06,922 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:06,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1425219925] [2021-12-21 13:17:06,923 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1425219925] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:06,923 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:06,923 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-21 13:17:06,923 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [342181911] [2021-12-21 13:17:06,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:06,924 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-21 13:17:06,924 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:06,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-21 13:17:06,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:17:06,925 INFO L87 Difference]: Start difference. First operand 616 states and 782 transitions. Second operand has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:17:07,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:07,782 INFO L93 Difference]: Finished difference Result 1697 states and 2268 transitions. [2021-12-21 13:17:07,782 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-21 13:17:07,783 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2021-12-21 13:17:07,783 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:07,790 INFO L225 Difference]: With dead ends: 1697 [2021-12-21 13:17:07,790 INFO L226 Difference]: Without dead ends: 1202 [2021-12-21 13:17:07,801 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 285 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-12-21 13:17:07,802 INFO L933 BasicCegarLoop]: 159 mSDtfsCounter, 708 mSDsluCounter, 499 mSDsCounter, 0 mSdLazyCounter, 719 mSolverCounterSat, 285 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 716 SdHoareTripleChecker+Valid, 658 SdHoareTripleChecker+Invalid, 1004 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 285 IncrementalHoareTripleChecker+Valid, 719 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:07,802 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [716 Valid, 658 Invalid, 1004 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [285 Valid, 719 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-21 13:17:07,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1202 states. [2021-12-21 13:17:07,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1202 to 1048. [2021-12-21 13:17:07,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1048 states, 782 states have (on average 1.227621483375959) internal successors, (960), 834 states have internal predecessors, (960), 140 states have call successors, (140), 106 states have call predecessors, (140), 125 states have return successors, (230), 139 states have call predecessors, (230), 140 states have call successors, (230) [2021-12-21 13:17:07,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1048 states to 1048 states and 1330 transitions. [2021-12-21 13:17:07,876 INFO L78 Accepts]: Start accepts. Automaton has 1048 states and 1330 transitions. Word has length 60 [2021-12-21 13:17:07,876 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:07,877 INFO L470 AbstractCegarLoop]: Abstraction has 1048 states and 1330 transitions. [2021-12-21 13:17:07,877 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:17:07,877 INFO L276 IsEmpty]: Start isEmpty. Operand 1048 states and 1330 transitions. [2021-12-21 13:17:07,879 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2021-12-21 13:17:07,880 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:07,880 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:07,880 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:17:07,880 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:07,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:07,881 INFO L85 PathProgramCache]: Analyzing trace with hash -182301856, now seen corresponding path program 1 times [2021-12-21 13:17:07,881 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:07,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [106653350] [2021-12-21 13:17:07,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:07,881 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:07,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:07,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:07,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:07,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:17:07,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:07,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:07,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:07,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:07,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:07,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:07,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:07,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-21 13:17:07,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:07,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-21 13:17:07,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:07,995 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-21 13:17:07,996 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:07,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [106653350] [2021-12-21 13:17:07,996 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [106653350] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:07,996 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:07,996 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:17:07,996 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1998040069] [2021-12-21 13:17:07,997 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:07,998 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:17:07,998 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:07,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:17:07,999 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:17:07,999 INFO L87 Difference]: Start difference. First operand 1048 states and 1330 transitions. Second operand has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-21 13:17:08,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:08,287 INFO L93 Difference]: Finished difference Result 1277 states and 1611 transitions. [2021-12-21 13:17:08,288 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-21 13:17:08,288 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 90 [2021-12-21 13:17:08,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:08,292 INFO L225 Difference]: With dead ends: 1277 [2021-12-21 13:17:08,292 INFO L226 Difference]: Without dead ends: 520 [2021-12-21 13:17:08,295 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-21 13:17:08,297 INFO L933 BasicCegarLoop]: 148 mSDtfsCounter, 342 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 221 mSolverCounterSat, 133 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 351 SdHoareTripleChecker+Valid, 366 SdHoareTripleChecker+Invalid, 354 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 133 IncrementalHoareTripleChecker+Valid, 221 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:08,298 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [351 Valid, 366 Invalid, 354 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [133 Valid, 221 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:17:08,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 520 states. [2021-12-21 13:17:08,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 520 to 476. [2021-12-21 13:17:08,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 476 states, 356 states have (on average 1.1853932584269662) internal successors, (422), 378 states have internal predecessors, (422), 62 states have call successors, (62), 47 states have call predecessors, (62), 57 states have return successors, (104), 62 states have call predecessors, (104), 62 states have call successors, (104) [2021-12-21 13:17:08,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 476 states to 476 states and 588 transitions. [2021-12-21 13:17:08,328 INFO L78 Accepts]: Start accepts. Automaton has 476 states and 588 transitions. Word has length 90 [2021-12-21 13:17:08,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:08,328 INFO L470 AbstractCegarLoop]: Abstraction has 476 states and 588 transitions. [2021-12-21 13:17:08,328 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-21 13:17:08,329 INFO L276 IsEmpty]: Start isEmpty. Operand 476 states and 588 transitions. [2021-12-21 13:17:08,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2021-12-21 13:17:08,330 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:08,330 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:08,331 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:17:08,331 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:08,331 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:08,332 INFO L85 PathProgramCache]: Analyzing trace with hash 1799468227, now seen corresponding path program 1 times [2021-12-21 13:17:08,332 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:08,332 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1917763174] [2021-12-21 13:17:08,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:08,332 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:08,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:08,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:17:08,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:08,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:08,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:08,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-21 13:17:08,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-21 13:17:08,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:17:08,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:08,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-12-21 13:17:08,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,513 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 8 proven. 20 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-21 13:17:08,513 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:08,513 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1917763174] [2021-12-21 13:17:08,513 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1917763174] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:08,513 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1060513438] [2021-12-21 13:17:08,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:08,514 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:08,514 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:08,519 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:08,525 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:17:08,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,639 INFO L263 TraceCheckSpWp]: Trace formula consists of 506 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:17:08,651 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:08,981 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 26 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:17:08,982 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:09,289 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-21 13:17:09,290 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1060513438] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:09,290 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:09,290 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-21 13:17:09,290 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [457023305] [2021-12-21 13:17:09,290 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:09,291 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-21 13:17:09,291 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:09,291 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-21 13:17:09,291 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:17:09,292 INFO L87 Difference]: Start difference. First operand 476 states and 588 transitions. Second operand has 15 states, 15 states have (on average 9.866666666666667) internal successors, (148), 10 states have internal predecessors, (148), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (20), 8 states have call predecessors, (20), 6 states have call successors, (20) [2021-12-21 13:17:10,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:10,151 INFO L93 Difference]: Finished difference Result 970 states and 1223 transitions. [2021-12-21 13:17:10,151 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2021-12-21 13:17:10,151 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.866666666666667) internal successors, (148), 10 states have internal predecessors, (148), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (20), 8 states have call predecessors, (20), 6 states have call successors, (20) Word has length 109 [2021-12-21 13:17:10,152 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:10,153 INFO L225 Difference]: With dead ends: 970 [2021-12-21 13:17:10,153 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:17:10,156 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 283 GetRequests, 245 SyntacticMatches, 1 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 324 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=345, Invalid=1137, Unknown=0, NotChecked=0, Total=1482 [2021-12-21 13:17:10,156 INFO L933 BasicCegarLoop]: 211 mSDtfsCounter, 419 mSDsluCounter, 825 mSDsCounter, 0 mSdLazyCounter, 905 mSolverCounterSat, 214 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 422 SdHoareTripleChecker+Valid, 1036 SdHoareTripleChecker+Invalid, 1119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 214 IncrementalHoareTripleChecker+Valid, 905 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:10,157 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [422 Valid, 1036 Invalid, 1119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [214 Valid, 905 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-21 13:17:10,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:17:10,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:17:10,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:17:10,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:17:10,159 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 109 [2021-12-21 13:17:10,159 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:10,159 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:17:10,159 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.866666666666667) internal successors, (148), 10 states have internal predecessors, (148), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (20), 8 states have call predecessors, (20), 6 states have call successors, (20) [2021-12-21 13:17:10,159 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:17:10,160 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:17:10,162 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:17:10,194 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:10,394 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-21 13:17:10,396 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:17:14,374 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 871 878) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 2 ~waterLevel~0)) .cse1 (= 0 ~systemActive~0)) (or .cse0 (not (= 1 ~systemActive~0)) .cse1))) [2021-12-21 13:17:14,374 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 871 878) no Hoare annotation was computed. [2021-12-21 13:17:14,375 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 871 878) no Hoare annotation was computed. [2021-12-21 13:17:14,375 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 778 784) no Hoare annotation was computed. [2021-12-21 13:17:14,375 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 778 784) the Hoare annotation is: true [2021-12-21 13:17:14,375 INFO L858 garLoopResultBuilder]: For program point L670-1(lines 666 677) no Hoare annotation was computed. [2021-12-21 13:17:14,375 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 666 677) the Hoare annotation is: true [2021-12-21 13:17:14,375 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 666 677) no Hoare annotation was computed. [2021-12-21 13:17:14,375 INFO L854 garLoopResultBuilder]: At program point L1018(line 1018) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0))) (let ((.cse9 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse10 (not (= 0 ~systemActive~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4))) (or .cse8 .cse9 .cse0 .cse5) (or .cse8 .cse5 .cse10 .cse6) (or .cse8 .cse9 .cse5 .cse10) (or .cse8 .cse0 .cse5 .cse6) (let ((.cse11 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse7 .cse11 .cse4) .cse5 (and .cse2 .cse11 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))))) [2021-12-21 13:17:14,376 INFO L854 garLoopResultBuilder]: At program point L857(line 857) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2) (or .cse1 .cse3 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse3 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 (not (= 0 ~systemActive~0))))) [2021-12-21 13:17:14,376 INFO L858 garLoopResultBuilder]: For program point L1018-1(line 1018) no Hoare annotation was computed. [2021-12-21 13:17:14,376 INFO L854 garLoopResultBuilder]: At program point L857-1(lines 838 862) the Hoare annotation is: (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 (not (<= 2 |old(~waterLevel~0)|)) (and .cse6 .cse3 .cse4))) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse7 (and .cse6 .cse8) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse8) .cse5)) (or .cse7 .cse5 (not (= 0 ~systemActive~0))) (let ((.cse9 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse6 .cse9 .cse4) .cse5 (and .cse2 .cse9 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-21 13:17:14,377 INFO L858 garLoopResultBuilder]: For program point L758(lines 758 764) no Hoare annotation was computed. [2021-12-21 13:17:14,378 INFO L854 garLoopResultBuilder]: At program point L886(lines 879 889) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 .cse1 (and .cse4 (<= ~waterLevel~0 2) .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1) (or .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-21 13:17:14,378 INFO L858 garLoopResultBuilder]: For program point L758-2(lines 754 776) no Hoare annotation was computed. [2021-12-21 13:17:14,378 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 751 777) no Hoare annotation was computed. [2021-12-21 13:17:14,378 INFO L858 garLoopResultBuilder]: For program point L561(line 561) no Hoare annotation was computed. [2021-12-21 13:17:14,378 INFO L858 garLoopResultBuilder]: For program point L846(lines 846 854) no Hoare annotation was computed. [2021-12-21 13:17:14,378 INFO L854 garLoopResultBuilder]: At program point L1003(line 1003) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0))) (or .cse2 .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-12-21 13:17:14,379 INFO L858 garLoopResultBuilder]: For program point L1003-1(line 1003) no Hoare annotation was computed. [2021-12-21 13:17:14,379 INFO L858 garLoopResultBuilder]: For program point L842(lines 842 859) no Hoare annotation was computed. [2021-12-21 13:17:14,379 INFO L858 garLoopResultBuilder]: For program point L1020(lines 1020 1030) no Hoare annotation was computed. [2021-12-21 13:17:14,379 INFO L858 garLoopResultBuilder]: For program point L1016(lines 1016 1033) no Hoare annotation was computed. [2021-12-21 13:17:14,379 INFO L854 garLoopResultBuilder]: At program point L1016-1(lines 1008 1036) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse10 (and .cse7 .cse11)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= 0 ~systemActive~0))) (.cse9 (and (<= |timeShift_getWaterLevel_#res#1| 2) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4))) (or .cse8 .cse0 .cse5 .cse9 .cse6) (or .cse8 .cse10 .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse11) .cse5) (or .cse8 .cse10 .cse5 .cse12) (or .cse8 .cse5 .cse12 .cse9 .cse6) (let ((.cse13 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse7 .cse13 .cse4) .cse5 (and .cse2 .cse13 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))))) [2021-12-21 13:17:14,380 INFO L854 garLoopResultBuilder]: At program point L562(lines 557 564) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 .cse0 .cse2))) [2021-12-21 13:17:14,380 INFO L854 garLoopResultBuilder]: At program point L715(lines 710 718) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (and .cse7 .cse10)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= 0 ~systemActive~0))) (.cse11 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4))) (or .cse8 .cse9 .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse10) .cse5) (or .cse8 .cse0 .cse5 .cse11 .cse6) (or .cse8 .cse9 .cse5 .cse12) (or .cse8 .cse5 .cse12 .cse11 .cse6) (let ((.cse13 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse7 .cse13 .cse4) .cse5 (and .cse2 .cse13 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))))) [2021-12-21 13:17:14,380 INFO L858 garLoopResultBuilder]: For program point L1021(lines 1021 1027) no Hoare annotation was computed. [2021-12-21 13:17:14,380 INFO L858 garLoopResultBuilder]: For program point L765-1(lines 765 771) no Hoare annotation was computed. [2021-12-21 13:17:14,380 INFO L854 garLoopResultBuilder]: At program point L852(line 852) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 .cse1 (and .cse4 (<= ~waterLevel~0 2) .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1) (or .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-21 13:17:14,381 INFO L854 garLoopResultBuilder]: At program point L848(line 848) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 .cse1 (and .cse4 (<= ~waterLevel~0 2) .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1) (or .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-21 13:17:14,381 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 751 777) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0))) (or .cse2 .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-12-21 13:17:14,381 INFO L854 garLoopResultBuilder]: At program point L1005(lines 998 1007) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse6)) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0))) (or .cse4 .cse2 .cse5 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-21 13:17:14,381 INFO L854 garLoopResultBuilder]: At program point L683(lines 678 686) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 .cse1 (and .cse4 (<= ~waterLevel~0 2) .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1) (or .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-21 13:17:14,381 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 751 777) no Hoare annotation was computed. [2021-12-21 13:17:14,382 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 561) no Hoare annotation was computed. [2021-12-21 13:17:14,382 INFO L858 garLoopResultBuilder]: For program point L646(lines 646 650) no Hoare annotation was computed. [2021-12-21 13:17:14,382 INFO L854 garLoopResultBuilder]: At program point L646-2(lines 642 653) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 .cse1 (and .cse4 (<= ~waterLevel~0 2) .cse5) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1) (or .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-21 13:17:14,382 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2021-12-21 13:17:14,382 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 418 447) the Hoare annotation is: true [2021-12-21 13:17:14,382 INFO L861 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2021-12-21 13:17:14,383 INFO L858 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2021-12-21 13:17:14,383 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2021-12-21 13:17:14,383 INFO L861 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2021-12-21 13:17:14,383 INFO L858 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2021-12-21 13:17:14,383 INFO L861 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2021-12-21 13:17:14,383 INFO L861 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2021-12-21 13:17:14,383 INFO L858 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2021-12-21 13:17:14,384 INFO L854 garLoopResultBuilder]: At program point L985(lines 973 987) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) [2021-12-21 13:17:14,384 INFO L858 garLoopResultBuilder]: For program point L597(lines 597 603) no Hoare annotation was computed. [2021-12-21 13:17:14,384 INFO L858 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2021-12-21 13:17:14,384 INFO L858 garLoopResultBuilder]: For program point L977(lines 977 983) no Hoare annotation was computed. [2021-12-21 13:17:14,384 INFO L858 garLoopResultBuilder]: For program point L977-1(lines 977 983) no Hoare annotation was computed. [2021-12-21 13:17:14,384 INFO L854 garLoopResultBuilder]: At program point L622(lines 577 624) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-21 13:17:14,385 INFO L854 garLoopResultBuilder]: At program point L589(line 589) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-21 13:17:14,385 INFO L854 garLoopResultBuilder]: At program point L552(lines 547 555) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:14,385 INFO L854 garLoopResultBuilder]: At program point L544(lines 540 546) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:14,385 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:17:14,385 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:17:14,385 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:17:14,385 INFO L854 garLoopResultBuilder]: At program point L995(lines 990 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:14,386 INFO L858 garLoopResultBuilder]: For program point L578(lines 577 624) no Hoare annotation was computed. [2021-12-21 13:17:14,386 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:17:14,386 INFO L854 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:14,386 INFO L858 garLoopResultBuilder]: For program point L607(lines 607 620) no Hoare annotation was computed. [2021-12-21 13:17:14,386 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2021-12-21 13:17:14,386 INFO L858 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2021-12-21 13:17:14,386 INFO L854 garLoopResultBuilder]: At program point L537(lines 533 539) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:14,387 INFO L854 garLoopResultBuilder]: At program point L599(line 599) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-21 13:17:14,387 INFO L861 garLoopResultBuilder]: At program point L628(lines 567 632) the Hoare annotation is: true [2021-12-21 13:17:14,387 INFO L854 garLoopResultBuilder]: At program point L979(line 979) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= ~waterLevel~0 2))) (or (and (= 1 ~systemActive~0) .cse0 .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not (= 0 ~systemActive~0))))) [2021-12-21 13:17:14,387 INFO L861 garLoopResultBuilder]: At program point L492(lines 484 494) the Hoare annotation is: true [2021-12-21 13:17:14,387 INFO L858 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2021-12-21 13:17:14,387 INFO L858 garLoopResultBuilder]: For program point L587-1(lines 587 593) no Hoare annotation was computed. [2021-12-21 13:17:14,388 INFO L861 garLoopResultBuilder]: At program point L517(lines 498 520) the Hoare annotation is: true [2021-12-21 13:17:14,388 INFO L858 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2021-12-21 13:17:14,388 INFO L854 garLoopResultBuilder]: At program point L625(lines 576 626) the Hoare annotation is: false [2021-12-21 13:17:14,388 INFO L858 garLoopResultBuilder]: For program point L613(lines 613 619) no Hoare annotation was computed. [2021-12-21 13:17:14,388 INFO L854 garLoopResultBuilder]: At program point L613-2(lines 607 620) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-21 13:17:14,388 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 786 810) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-21 13:17:14,389 INFO L854 garLoopResultBuilder]: At program point L950(lines 935 953) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2 (and .cse1 (<= 2 ~waterLevel~0)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:14,389 INFO L858 garLoopResultBuilder]: For program point L723(lines 723 729) no Hoare annotation was computed. [2021-12-21 13:17:14,389 INFO L858 garLoopResultBuilder]: For program point L944(lines 944 948) no Hoare annotation was computed. [2021-12-21 13:17:14,389 INFO L858 garLoopResultBuilder]: For program point L944-2(lines 944 948) no Hoare annotation was computed. [2021-12-21 13:17:14,389 INFO L854 garLoopResultBuilder]: At program point L868(lines 863 870) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2021-12-21 13:17:14,389 INFO L854 garLoopResultBuilder]: At program point L800(line 800) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)) .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:14,389 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 786 810) no Hoare annotation was computed. [2021-12-21 13:17:14,390 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 802) no Hoare annotation was computed. [2021-12-21 13:17:14,390 INFO L854 garLoopResultBuilder]: At program point L728(lines 719 732) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and .cse2 (<= 2 ~waterLevel~0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2))))) [2021-12-21 13:17:14,390 INFO L858 garLoopResultBuilder]: For program point L790(lines 790 807) no Hoare annotation was computed. [2021-12-21 13:17:14,390 INFO L854 garLoopResultBuilder]: At program point L805(line 805) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:17:14,390 INFO L858 garLoopResultBuilder]: For program point L805-1(lines 786 810) no Hoare annotation was computed. [2021-12-21 13:17:14,390 INFO L858 garLoopResultBuilder]: For program point L658-1(lines 654 665) no Hoare annotation was computed. [2021-12-21 13:17:14,390 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 654 665) no Hoare annotation was computed. [2021-12-21 13:17:14,391 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 654 665) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse3 (not (= 0 ~systemActive~0))) (or .cse4 .cse0 .cse2 .cse3))) [2021-12-21 13:17:14,391 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 812 836) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-21 13:17:14,391 INFO L854 garLoopResultBuilder]: At program point L826(line 826) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:17:14,391 INFO L854 garLoopResultBuilder]: At program point L822(line 822) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:17:14,391 INFO L858 garLoopResultBuilder]: For program point L820(lines 820 828) no Hoare annotation was computed. [2021-12-21 13:17:14,391 INFO L858 garLoopResultBuilder]: For program point L816(lines 816 833) no Hoare annotation was computed. [2021-12-21 13:17:14,392 INFO L854 garLoopResultBuilder]: At program point L969(lines 954 972) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:17:14,392 INFO L858 garLoopResultBuilder]: For program point L963(lines 963 967) no Hoare annotation was computed. [2021-12-21 13:17:14,392 INFO L854 garLoopResultBuilder]: At program point L738(lines 733 741) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-21 13:17:14,392 INFO L858 garLoopResultBuilder]: For program point L963-2(lines 963 967) no Hoare annotation was computed. [2021-12-21 13:17:14,392 INFO L854 garLoopResultBuilder]: At program point L831(line 831) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:14,392 INFO L858 garLoopResultBuilder]: For program point L831-1(lines 812 836) no Hoare annotation was computed. [2021-12-21 13:17:14,393 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 812 836) no Hoare annotation was computed. [2021-12-21 13:17:14,393 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 890 898) no Hoare annotation was computed. [2021-12-21 13:17:14,393 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 890 898) the Hoare annotation is: true [2021-12-21 13:17:14,393 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 890 898) no Hoare annotation was computed. [2021-12-21 13:17:14,396 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:14,397 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:17:14,421 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:17:14 BoogieIcfgContainer [2021-12-21 13:17:14,421 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:17:14,421 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:17:14,422 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:17:14,422 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:17:14,422 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:17:04" (3/4) ... [2021-12-21 13:17:14,425 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:17:14,430 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-21 13:17:14,430 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:17:14,430 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:17:14,430 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:17:14,430 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:17:14,430 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:17:14,431 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:17:14,431 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-21 13:17:14,431 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-21 13:17:14,438 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2021-12-21 13:17:14,438 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:17:14,439 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:17:14,439 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:17:14,439 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:17:14,440 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:14,440 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:14,459 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:14,460 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-21 13:17:14,461 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:14,461 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:14,461 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:17:14,462 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:14,462 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-21 13:17:14,462 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-21 13:17:14,463 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-21 13:17:14,463 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) [2021-12-21 13:17:14,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-21 13:17:14,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2021-12-21 13:17:14,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-21 13:17:14,505 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:17:14,506 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:17:14,506 INFO L158 Benchmark]: Toolchain (without parser) took 11199.64ms. Allocated memory was 96.5MB in the beginning and 155.2MB in the end (delta: 58.7MB). Free memory was 64.7MB in the beginning and 62.3MB in the end (delta: 2.4MB). Peak memory consumption was 59.8MB. Max. memory is 16.1GB. [2021-12-21 13:17:14,507 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 96.5MB. Free memory was 53.6MB in the beginning and 53.5MB in the end (delta: 34.5kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:17:14,507 INFO L158 Benchmark]: CACSL2BoogieTranslator took 429.39ms. Allocated memory was 96.5MB in the beginning and 119.5MB in the end (delta: 23.1MB). Free memory was 64.4MB in the beginning and 87.1MB in the end (delta: -22.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-21 13:17:14,507 INFO L158 Benchmark]: Boogie Procedure Inliner took 75.77ms. Allocated memory is still 119.5MB. Free memory was 87.1MB in the beginning and 84.4MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-21 13:17:14,507 INFO L158 Benchmark]: Boogie Preprocessor took 51.23ms. Allocated memory is still 119.5MB. Free memory was 84.4MB in the beginning and 82.8MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:17:14,508 INFO L158 Benchmark]: RCFGBuilder took 533.30ms. Allocated memory is still 119.5MB. Free memory was 82.8MB in the beginning and 63.9MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-21 13:17:14,509 INFO L158 Benchmark]: TraceAbstraction took 10016.50ms. Allocated memory was 119.5MB in the beginning and 155.2MB in the end (delta: 35.7MB). Free memory was 63.4MB in the beginning and 69.7MB in the end (delta: -6.2MB). Peak memory consumption was 60.9MB. Max. memory is 16.1GB. [2021-12-21 13:17:14,509 INFO L158 Benchmark]: Witness Printer took 84.26ms. Allocated memory is still 155.2MB. Free memory was 69.7MB in the beginning and 62.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:17:14,510 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 96.5MB. Free memory was 53.6MB in the beginning and 53.5MB in the end (delta: 34.5kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 429.39ms. Allocated memory was 96.5MB in the beginning and 119.5MB in the end (delta: 23.1MB). Free memory was 64.4MB in the beginning and 87.1MB in the end (delta: -22.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 75.77ms. Allocated memory is still 119.5MB. Free memory was 87.1MB in the beginning and 84.4MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 51.23ms. Allocated memory is still 119.5MB. Free memory was 84.4MB in the beginning and 82.8MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 533.30ms. Allocated memory is still 119.5MB. Free memory was 82.8MB in the beginning and 63.9MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 10016.50ms. Allocated memory was 119.5MB in the beginning and 155.2MB in the end (delta: 35.7MB). Free memory was 63.4MB in the beginning and 69.7MB in the end (delta: -6.2MB). Peak memory consumption was 60.9MB. Max. memory is 16.1GB. * Witness Printer took 84.26ms. Allocated memory is still 155.2MB. Free memory was 69.7MB in the beginning and 62.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 561]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 109 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.9s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2222 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2180 mSDsluCounter, 4581 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3119 mSDsCounter, 809 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2411 IncrementalHoareTripleChecker+Invalid, 3220 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 809 mSolverCounterUnsat, 1462 mSDtfsCounter, 2411 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 449 GetRequests, 334 SyntacticMatches, 3 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 647 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1048occurred in iteration=8, InterpolantAutomatonStates: 106, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 249 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 1781 PreInvPairs, 2001 NumberOfFragments, 2340 HoareAnnotationTreeSize, 1781 FomulaSimplifications, 1997 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 51 FomulaSimplificationsInter, 10958 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 679 NumberOfCodeBlocks, 679 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 776 ConstructedInterpolants, 0 QuantifiedInterpolants, 1593 SizeOfPredicates, 3 NumberOfNonLiveVariables, 506 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 121/162 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 990]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 935]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 557]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 642]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 710]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 838]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-12-21 13:17:14,567 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE