./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product29.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8db025334db2e06ebc154a332660702acdbfca34e28313be5c0c817acc07c5f4 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 01:00:24,706 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 01:00:24,721 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 01:00:24,754 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 01:00:24,755 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 01:00:24,755 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 01:00:24,756 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 01:00:24,757 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 01:00:24,758 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 01:00:24,759 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 01:00:24,761 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 01:00:24,762 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 01:00:24,764 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 01:00:24,766 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 01:00:24,768 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 01:00:24,769 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 01:00:24,773 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 01:00:24,773 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 01:00:24,774 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 01:00:24,776 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 01:00:24,776 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 01:00:24,777 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 01:00:24,779 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 01:00:24,780 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 01:00:24,783 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 01:00:24,786 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 01:00:24,786 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 01:00:24,787 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 01:00:24,787 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 01:00:24,788 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 01:00:24,788 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 01:00:24,789 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 01:00:24,790 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 01:00:24,790 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 01:00:24,791 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 01:00:24,792 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 01:00:24,793 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 01:00:24,793 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 01:00:24,793 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 01:00:24,794 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 01:00:24,794 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 01:00:24,795 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 01:00:24,811 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 01:00:24,811 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 01:00:24,811 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 01:00:24,812 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 01:00:24,812 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 01:00:24,812 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 01:00:24,813 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 01:00:24,813 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 01:00:24,813 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 01:00:24,813 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 01:00:24,814 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 01:00:24,814 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 01:00:24,815 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 01:00:24,815 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 01:00:24,815 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 01:00:24,815 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 01:00:24,815 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 01:00:24,815 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 01:00:24,815 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 01:00:24,816 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 01:00:24,816 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 01:00:24,816 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 01:00:24,816 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 01:00:24,816 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 01:00:24,816 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:00:24,817 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 01:00:24,817 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 01:00:24,817 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 01:00:24,817 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 01:00:24,817 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 01:00:24,817 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 01:00:24,818 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 01:00:24,818 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 01:00:24,818 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 01:00:24,818 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8db025334db2e06ebc154a332660702acdbfca34e28313be5c0c817acc07c5f4 [2021-12-16 01:00:25,003 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 01:00:25,030 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 01:00:25,032 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 01:00:25,033 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 01:00:25,034 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 01:00:25,035 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product29.cil.c [2021-12-16 01:00:25,112 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/43a4a73b5/fdd0a2c97719422aa92a0d900e0300f3/FLAGd8da472dc [2021-12-16 01:00:25,489 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 01:00:25,490 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product29.cil.c [2021-12-16 01:00:25,503 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/43a4a73b5/fdd0a2c97719422aa92a0d900e0300f3/FLAGd8da472dc [2021-12-16 01:00:25,889 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/43a4a73b5/fdd0a2c97719422aa92a0d900e0300f3 [2021-12-16 01:00:25,891 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 01:00:25,892 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 01:00:25,895 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 01:00:25,895 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 01:00:25,897 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 01:00:25,898 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:00:25" (1/1) ... [2021-12-16 01:00:25,899 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2e016851 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:25, skipping insertion in model container [2021-12-16 01:00:25,899 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:00:25" (1/1) ... [2021-12-16 01:00:25,903 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 01:00:25,942 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 01:00:26,100 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product29.cil.c[2984,2997] [2021-12-16 01:00:26,157 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:00:26,163 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 01:00:26,176 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product29.cil.c[2984,2997] [2021-12-16 01:00:26,220 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:00:26,236 INFO L208 MainTranslator]: Completed translation [2021-12-16 01:00:26,239 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26 WrapperNode [2021-12-16 01:00:26,239 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 01:00:26,241 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 01:00:26,241 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 01:00:26,241 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 01:00:26,246 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,264 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,284 INFO L137 Inliner]: procedures = 54, calls = 155, calls flagged for inlining = 21, calls inlined = 17, statements flattened = 243 [2021-12-16 01:00:26,285 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 01:00:26,285 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 01:00:26,285 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 01:00:26,286 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 01:00:26,291 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,291 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,297 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,297 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,303 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,316 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,319 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,320 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 01:00:26,323 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 01:00:26,323 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 01:00:26,323 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 01:00:26,324 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (1/1) ... [2021-12-16 01:00:26,330 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:00:26,337 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:00:26,347 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 01:00:26,355 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 01:00:26,387 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 01:00:26,388 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 01:00:26,388 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 01:00:26,388 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 01:00:26,388 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 01:00:26,388 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 01:00:26,388 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 01:00:26,389 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 01:00:26,389 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 01:00:26,389 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 01:00:26,389 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 01:00:26,389 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-16 01:00:26,389 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-16 01:00:26,389 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 01:00:26,389 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 01:00:26,389 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 01:00:26,390 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 01:00:26,390 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 01:00:26,390 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 01:00:26,390 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 01:00:26,454 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 01:00:26,455 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 01:00:26,683 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 01:00:26,688 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 01:00:26,688 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 01:00:26,689 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:00:26 BoogieIcfgContainer [2021-12-16 01:00:26,689 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 01:00:26,691 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 01:00:26,691 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 01:00:26,693 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 01:00:26,693 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 01:00:25" (1/3) ... [2021-12-16 01:00:26,694 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27af85c0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:00:26, skipping insertion in model container [2021-12-16 01:00:26,694 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:00:26" (2/3) ... [2021-12-16 01:00:26,694 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27af85c0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:00:26, skipping insertion in model container [2021-12-16 01:00:26,694 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:00:26" (3/3) ... [2021-12-16 01:00:26,695 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product29.cil.c [2021-12-16 01:00:26,699 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 01:00:26,699 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 01:00:26,730 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 01:00:26,737 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 01:00:26,737 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 01:00:26,758 INFO L276 IsEmpty]: Start isEmpty. Operand has 86 states, 63 states have (on average 1.380952380952381) internal successors, (87), 71 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-16 01:00:26,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-12-16 01:00:26,763 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:00:26,764 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:00:26,764 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:00:26,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:00:26,772 INFO L85 PathProgramCache]: Analyzing trace with hash 12201370, now seen corresponding path program 1 times [2021-12-16 01:00:26,781 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:00:26,781 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1002456516] [2021-12-16 01:00:26,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:00:26,782 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:00:26,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:26,946 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:00:26,947 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:00:26,948 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1002456516] [2021-12-16 01:00:26,948 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1002456516] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:00:26,949 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:00:26,949 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 01:00:26,951 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2068149045] [2021-12-16 01:00:26,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:00:26,955 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 01:00:26,955 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:00:26,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 01:00:26,978 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:00:26,980 INFO L87 Difference]: Start difference. First operand has 86 states, 63 states have (on average 1.380952380952381) internal successors, (87), 71 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:00:27,017 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:00:27,017 INFO L93 Difference]: Finished difference Result 164 states and 221 transitions. [2021-12-16 01:00:27,018 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 01:00:27,019 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-12-16 01:00:27,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:00:27,026 INFO L225 Difference]: With dead ends: 164 [2021-12-16 01:00:27,026 INFO L226 Difference]: Without dead ends: 77 [2021-12-16 01:00:27,029 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:00:27,032 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:00:27,032 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:00:27,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2021-12-16 01:00:27,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2021-12-16 01:00:27,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 8 states have call predecessors, (12), 12 states have call successors, (12) [2021-12-16 01:00:27,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 98 transitions. [2021-12-16 01:00:27,069 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 98 transitions. Word has length 19 [2021-12-16 01:00:27,069 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:00:27,070 INFO L470 AbstractCegarLoop]: Abstraction has 77 states and 98 transitions. [2021-12-16 01:00:27,070 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:00:27,070 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 98 transitions. [2021-12-16 01:00:27,073 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2021-12-16 01:00:27,073 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:00:27,074 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:00:27,074 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 01:00:27,075 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:00:27,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:00:27,078 INFO L85 PathProgramCache]: Analyzing trace with hash 1737320962, now seen corresponding path program 1 times [2021-12-16 01:00:27,079 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:00:27,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1882877047] [2021-12-16 01:00:27,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:00:27,080 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:00:27,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:27,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:00:27,144 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:00:27,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1882877047] [2021-12-16 01:00:27,145 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1882877047] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:00:27,145 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:00:27,145 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 01:00:27,146 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [265724992] [2021-12-16 01:00:27,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:00:27,147 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 01:00:27,155 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:00:27,155 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 01:00:27,156 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:00:27,156 INFO L87 Difference]: Start difference. First operand 77 states and 98 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:00:27,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:00:27,170 INFO L93 Difference]: Finished difference Result 120 states and 152 transitions. [2021-12-16 01:00:27,170 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 01:00:27,171 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2021-12-16 01:00:27,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:00:27,172 INFO L225 Difference]: With dead ends: 120 [2021-12-16 01:00:27,172 INFO L226 Difference]: Without dead ends: 68 [2021-12-16 01:00:27,172 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:00:27,173 INFO L933 BasicCegarLoop]: 85 mSDtfsCounter, 12 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:00:27,173 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 154 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:00:27,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2021-12-16 01:00:27,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2021-12-16 01:00:27,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 50 states have (on average 1.32) internal successors, (66), 57 states have internal predecessors, (66), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 6 states have call predecessors, (10), 10 states have call successors, (10) [2021-12-16 01:00:27,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 86 transitions. [2021-12-16 01:00:27,180 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 86 transitions. Word has length 20 [2021-12-16 01:00:27,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:00:27,181 INFO L470 AbstractCegarLoop]: Abstraction has 68 states and 86 transitions. [2021-12-16 01:00:27,181 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:00:27,181 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 86 transitions. [2021-12-16 01:00:27,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-16 01:00:27,182 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:00:27,182 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:00:27,182 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 01:00:27,182 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:00:27,183 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:00:27,183 INFO L85 PathProgramCache]: Analyzing trace with hash -688756728, now seen corresponding path program 1 times [2021-12-16 01:00:27,183 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:00:27,183 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1903567968] [2021-12-16 01:00:27,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:00:27,183 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:00:27,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:27,241 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:00:27,242 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:00:27,242 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1903567968] [2021-12-16 01:00:27,242 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1903567968] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:00:27,242 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:00:27,243 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 01:00:27,244 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1211016430] [2021-12-16 01:00:27,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:00:27,244 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 01:00:27,244 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:00:27,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 01:00:27,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:00:27,246 INFO L87 Difference]: Start difference. First operand 68 states and 86 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:00:27,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:00:27,255 INFO L93 Difference]: Finished difference Result 129 states and 166 transitions. [2021-12-16 01:00:27,256 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 01:00:27,256 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-12-16 01:00:27,256 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:00:27,257 INFO L225 Difference]: With dead ends: 129 [2021-12-16 01:00:27,257 INFO L226 Difference]: Without dead ends: 68 [2021-12-16 01:00:27,257 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:00:27,258 INFO L933 BasicCegarLoop]: 84 mSDtfsCounter, 68 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:00:27,259 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [68 Valid, 84 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:00:27,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2021-12-16 01:00:27,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2021-12-16 01:00:27,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 50 states have (on average 1.3) internal successors, (65), 57 states have internal predecessors, (65), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 6 states have call predecessors, (10), 10 states have call successors, (10) [2021-12-16 01:00:27,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 85 transitions. [2021-12-16 01:00:27,268 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 85 transitions. Word has length 24 [2021-12-16 01:00:27,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:00:27,269 INFO L470 AbstractCegarLoop]: Abstraction has 68 states and 85 transitions. [2021-12-16 01:00:27,269 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:00:27,269 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 85 transitions. [2021-12-16 01:00:27,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-16 01:00:27,270 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:00:27,270 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:00:27,270 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 01:00:27,271 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:00:27,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:00:27,272 INFO L85 PathProgramCache]: Analyzing trace with hash -184867227, now seen corresponding path program 1 times [2021-12-16 01:00:27,272 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:00:27,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1431350908] [2021-12-16 01:00:27,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:00:27,272 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:00:27,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:27,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:00:27,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:27,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:00:27,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:27,387 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:00:27,387 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:00:27,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1431350908] [2021-12-16 01:00:27,388 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1431350908] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:00:27,388 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:00:27,388 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:00:27,388 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1908069444] [2021-12-16 01:00:27,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:00:27,390 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:00:27,390 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:00:27,390 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:00:27,391 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:00:27,391 INFO L87 Difference]: Start difference. First operand 68 states and 85 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:00:27,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:00:27,577 INFO L93 Difference]: Finished difference Result 205 states and 265 transitions. [2021-12-16 01:00:27,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 01:00:27,578 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 34 [2021-12-16 01:00:27,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:00:27,580 INFO L225 Difference]: With dead ends: 205 [2021-12-16 01:00:27,580 INFO L226 Difference]: Without dead ends: 144 [2021-12-16 01:00:27,581 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-16 01:00:27,582 INFO L933 BasicCegarLoop]: 71 mSDtfsCounter, 135 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:00:27,582 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [139 Valid, 279 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:00:27,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 144 states. [2021-12-16 01:00:27,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 144 to 122. [2021-12-16 01:00:27,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 88 states have (on average 1.2954545454545454) internal successors, (114), 100 states have internal predecessors, (114), 20 states have call successors, (20), 14 states have call predecessors, (20), 13 states have return successors, (21), 11 states have call predecessors, (21), 20 states have call successors, (21) [2021-12-16 01:00:27,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 155 transitions. [2021-12-16 01:00:27,611 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 155 transitions. Word has length 34 [2021-12-16 01:00:27,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:00:27,612 INFO L470 AbstractCegarLoop]: Abstraction has 122 states and 155 transitions. [2021-12-16 01:00:27,612 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:00:27,612 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 155 transitions. [2021-12-16 01:00:27,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-16 01:00:27,613 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:00:27,614 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:00:27,614 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 01:00:27,614 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:00:27,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:00:27,614 INFO L85 PathProgramCache]: Analyzing trace with hash 821655115, now seen corresponding path program 1 times [2021-12-16 01:00:27,615 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:00:27,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [824166857] [2021-12-16 01:00:27,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:00:27,615 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:00:27,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:27,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 01:00:27,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:27,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 01:00:27,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:27,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:00:27,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:27,688 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:00:27,688 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:00:27,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [824166857] [2021-12-16 01:00:27,688 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [824166857] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:00:27,688 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:00:27,690 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 01:00:27,690 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [264492396] [2021-12-16 01:00:27,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:00:27,691 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 01:00:27,691 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:00:27,691 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 01:00:27,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:00:27,692 INFO L87 Difference]: Start difference. First operand 122 states and 155 transitions. Second operand has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-16 01:00:27,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:00:27,804 INFO L93 Difference]: Finished difference Result 199 states and 257 transitions. [2021-12-16 01:00:27,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:00:27,805 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2021-12-16 01:00:27,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:00:27,805 INFO L225 Difference]: With dead ends: 199 [2021-12-16 01:00:27,805 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 01:00:27,807 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2021-12-16 01:00:27,808 INFO L933 BasicCegarLoop]: 41 mSDtfsCounter, 69 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 73 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 93 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 73 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:00:27,808 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [70 Valid, 141 Invalid, 93 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 73 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:00:27,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 01:00:27,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 01:00:27,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:00:27,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 01:00:27,809 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 38 [2021-12-16 01:00:27,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:00:27,810 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 01:00:27,810 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-16 01:00:27,810 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 01:00:27,810 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 01:00:27,812 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 01:00:27,812 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 01:00:27,814 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 01:00:28,254 INFO L861 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 742 749) the Hoare annotation is: true [2021-12-16 01:00:28,255 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 742 749) no Hoare annotation was computed. [2021-12-16 01:00:28,256 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 742 749) no Hoare annotation was computed. [2021-12-16 01:00:28,256 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 658 664) no Hoare annotation was computed. [2021-12-16 01:00:28,256 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 658 664) the Hoare annotation is: true [2021-12-16 01:00:28,256 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: true [2021-12-16 01:00:28,256 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2021-12-16 01:00:28,256 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2021-12-16 01:00:28,256 INFO L861 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: true [2021-12-16 01:00:28,256 INFO L858 garLoopResultBuilder]: For program point L833-1(line 833) no Hoare annotation was computed. [2021-12-16 01:00:28,257 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 827 856) no Hoare annotation was computed. [2021-12-16 01:00:28,257 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 827 856) the Hoare annotation is: true [2021-12-16 01:00:28,257 INFO L861 garLoopResultBuilder]: At program point L852(lines 827 856) the Hoare annotation is: true [2021-12-16 01:00:28,257 INFO L858 garLoopResultBuilder]: For program point L848(line 848) no Hoare annotation was computed. [2021-12-16 01:00:28,257 INFO L858 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2021-12-16 01:00:28,257 INFO L861 garLoopResultBuilder]: At program point L841-1(lines 841 845) the Hoare annotation is: true [2021-12-16 01:00:28,257 INFO L858 garLoopResultBuilder]: For program point L838(line 838) no Hoare annotation was computed. [2021-12-16 01:00:28,258 INFO L861 garLoopResultBuilder]: At program point L837-2(lines 837 851) the Hoare annotation is: true [2021-12-16 01:00:28,258 INFO L854 garLoopResultBuilder]: At program point L766(lines 761 769) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (and (= |timeShift_isPumpRunning_#res#1| 0) (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse0 .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1))) [2021-12-16 01:00:28,258 INFO L858 garLoopResultBuilder]: For program point L638-1(lines 637 656) no Hoare annotation was computed. [2021-12-16 01:00:28,258 INFO L858 garLoopResultBuilder]: For program point L700(lines 700 708) no Hoare annotation was computed. [2021-12-16 01:00:28,258 INFO L858 garLoopResultBuilder]: For program point L696(lines 696 713) no Hoare annotation was computed. [2021-12-16 01:00:28,258 INFO L854 garLoopResultBuilder]: At program point L151(lines 146 153) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,258 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 634 657) no Hoare annotation was computed. [2021-12-16 01:00:28,259 INFO L854 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse0 .cse1) (or (not (= |old(~waterLevel~0)| 1)) (= |timeShift_getWaterLevel_#res#1| 1) .cse0 .cse1))) [2021-12-16 01:00:28,259 INFO L854 garLoopResultBuilder]: At program point L706(line 706) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,259 INFO L854 garLoopResultBuilder]: At program point L702(line 702) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,259 INFO L854 garLoopResultBuilder]: At program point L698(line 698) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,259 INFO L858 garLoopResultBuilder]: For program point L698-1(line 698) no Hoare annotation was computed. [2021-12-16 01:00:28,259 INFO L854 garLoopResultBuilder]: At program point L711(line 711) the Hoare annotation is: (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,260 INFO L854 garLoopResultBuilder]: At program point L711-1(lines 692 716) the Hoare annotation is: (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,260 INFO L858 garLoopResultBuilder]: For program point L934(lines 934 940) no Hoare annotation was computed. [2021-12-16 01:00:28,260 INFO L858 garLoopResultBuilder]: For program point L645-1(lines 645 651) no Hoare annotation was computed. [2021-12-16 01:00:28,260 INFO L858 garLoopResultBuilder]: For program point L930(lines 930 943) no Hoare annotation was computed. [2021-12-16 01:00:28,260 INFO L854 garLoopResultBuilder]: At program point L930-1(lines 922 946) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| 1) (= |timeShift_getWaterLevel_#res#1| 1)) .cse1) (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse0 .cse1))) [2021-12-16 01:00:28,260 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2021-12-16 01:00:28,260 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,261 INFO L858 garLoopResultBuilder]: For program point L150(line 150) no Hoare annotation was computed. [2021-12-16 01:00:28,261 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 634 657) the Hoare annotation is: (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,261 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 634 657) no Hoare annotation was computed. [2021-12-16 01:00:28,261 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 150) no Hoare annotation was computed. [2021-12-16 01:00:28,265 INFO L854 garLoopResultBuilder]: At program point L576(lines 533 578) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,266 INFO L858 garLoopResultBuilder]: For program point L543(lines 543 549) no Hoare annotation was computed. [2021-12-16 01:00:28,266 INFO L858 garLoopResultBuilder]: For program point L543-1(lines 543 549) no Hoare annotation was computed. [2021-12-16 01:00:28,266 INFO L858 garLoopResultBuilder]: For program point L535(lines 535 539) no Hoare annotation was computed. [2021-12-16 01:00:28,266 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 01:00:28,266 INFO L861 garLoopResultBuilder]: At program point L895(lines 888 897) the Hoare annotation is: true [2021-12-16 01:00:28,266 INFO L854 garLoopResultBuilder]: At program point L606(lines 602 608) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,267 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 01:00:28,267 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 01:00:28,267 INFO L858 garLoopResultBuilder]: For program point L569(lines 569 573) no Hoare annotation was computed. [2021-12-16 01:00:28,267 INFO L854 garLoopResultBuilder]: At program point L569-2(lines 563 574) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,267 INFO L858 garLoopResultBuilder]: For program point L908(lines 908 915) no Hoare annotation was computed. [2021-12-16 01:00:28,267 INFO L858 garLoopResultBuilder]: For program point L908-2(lines 908 915) no Hoare annotation was computed. [2021-12-16 01:00:28,267 INFO L858 garLoopResultBuilder]: For program point L553(lines 553 559) no Hoare annotation was computed. [2021-12-16 01:00:28,267 INFO L858 garLoopResultBuilder]: For program point L553-1(lines 553 559) no Hoare annotation was computed. [2021-12-16 01:00:28,268 INFO L861 garLoopResultBuilder]: At program point L582(lines 523 586) the Hoare annotation is: true [2021-12-16 01:00:28,268 INFO L854 garLoopResultBuilder]: At program point L545(line 545) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,268 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 01:00:28,268 INFO L861 garLoopResultBuilder]: At program point L917(lines 898 920) the Hoare annotation is: true [2021-12-16 01:00:28,268 INFO L854 garLoopResultBuilder]: At program point L579(lines 532 580) the Hoare annotation is: false [2021-12-16 01:00:28,268 INFO L858 garLoopResultBuilder]: For program point L534(lines 533 578) no Hoare annotation was computed. [2021-12-16 01:00:28,268 INFO L854 garLoopResultBuilder]: At program point L885(lines 881 887) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,269 INFO L858 garLoopResultBuilder]: For program point L563(lines 563 574) no Hoare annotation was computed. [2021-12-16 01:00:28,269 INFO L854 garLoopResultBuilder]: At program point L621(lines 616 624) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,269 INFO L854 garLoopResultBuilder]: At program point L555(line 555) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,269 INFO L854 garLoopResultBuilder]: At program point L613(lines 609 615) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,269 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2021-12-16 01:00:28,269 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2021-12-16 01:00:28,269 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (= ~waterLevel~0 |old(~waterLevel~0)|) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,269 INFO L854 garLoopResultBuilder]: At program point L141(lines 136 144) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,270 INFO L854 garLoopResultBuilder]: At program point L680(line 680) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,270 INFO L854 garLoopResultBuilder]: At program point L676(line 676) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,270 INFO L858 garLoopResultBuilder]: For program point L674(lines 674 682) no Hoare annotation was computed. [2021-12-16 01:00:28,270 INFO L858 garLoopResultBuilder]: For program point L670(lines 670 687) no Hoare annotation was computed. [2021-12-16 01:00:28,270 INFO L854 garLoopResultBuilder]: At program point L821(lines 806 824) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1))) [2021-12-16 01:00:28,270 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 666 690) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1)) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,270 INFO L858 garLoopResultBuilder]: For program point L815(lines 815 819) no Hoare annotation was computed. [2021-12-16 01:00:28,270 INFO L858 garLoopResultBuilder]: For program point L815-2(lines 815 819) no Hoare annotation was computed. [2021-12-16 01:00:28,271 INFO L854 garLoopResultBuilder]: At program point L685(line 685) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~systemActive~0 1)) (= ~pumpRunning~0 0)) [2021-12-16 01:00:28,271 INFO L858 garLoopResultBuilder]: For program point L685-1(lines 666 690) no Hoare annotation was computed. [2021-12-16 01:00:28,271 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 666 690) no Hoare annotation was computed. [2021-12-16 01:00:28,271 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 750 760) the Hoare annotation is: true [2021-12-16 01:00:28,271 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 750 760) no Hoare annotation was computed. [2021-12-16 01:00:28,271 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 750 760) no Hoare annotation was computed. [2021-12-16 01:00:28,271 INFO L861 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: true [2021-12-16 01:00:28,274 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1] [2021-12-16 01:00:28,276 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 01:00:28,295 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 01:00:28 BoogieIcfgContainer [2021-12-16 01:00:28,296 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 01:00:28,296 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 01:00:28,296 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 01:00:28,297 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 01:00:28,297 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:00:26" (3/4) ... [2021-12-16 01:00:28,300 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 01:00:28,305 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 01:00:28,305 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 01:00:28,305 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 01:00:28,305 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 01:00:28,305 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 01:00:28,305 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 01:00:28,305 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-16 01:00:28,305 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-16 01:00:28,310 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-12-16 01:00:28,310 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 01:00:28,311 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 01:00:28,311 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 01:00:28,311 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 01:00:28,311 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:00:28,312 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:00:28,327 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || !(systemActive == 1) [2021-12-16 01:00:28,327 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) [2021-12-16 01:00:28,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 01:00:28,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || (tmp == 1 && \result == 1)) || !(systemActive == 1)) && (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 01:00:28,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || !(systemActive == 1) [2021-12-16 01:00:28,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 01:00:28,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || !(systemActive == 1) [2021-12-16 01:00:28,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || !(systemActive == 1) [2021-12-16 01:00:28,357 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 01:00:28,361 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 01:00:28,362 INFO L158 Benchmark]: Toolchain (without parser) took 2470.05ms. Allocated memory was 88.1MB in the beginning and 134.2MB in the end (delta: 46.1MB). Free memory was 54.5MB in the beginning and 87.3MB in the end (delta: -32.8MB). Peak memory consumption was 13.4MB. Max. memory is 16.1GB. [2021-12-16 01:00:28,362 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 88.1MB. Free memory was 44.8MB in the beginning and 44.8MB in the end (delta: 34.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:00:28,363 INFO L158 Benchmark]: CACSL2BoogieTranslator took 344.16ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 54.2MB in the beginning and 74.2MB in the end (delta: -20.0MB). Peak memory consumption was 7.7MB. Max. memory is 16.1GB. [2021-12-16 01:00:28,363 INFO L158 Benchmark]: Boogie Procedure Inliner took 44.35ms. Allocated memory is still 107.0MB. Free memory was 74.2MB in the beginning and 71.7MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-16 01:00:28,363 INFO L158 Benchmark]: Boogie Preprocessor took 36.17ms. Allocated memory is still 107.0MB. Free memory was 71.7MB in the beginning and 70.1MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:00:28,364 INFO L158 Benchmark]: RCFGBuilder took 366.61ms. Allocated memory is still 107.0MB. Free memory was 70.1MB in the beginning and 81.4MB in the end (delta: -11.2MB). Peak memory consumption was 19.1MB. Max. memory is 16.1GB. [2021-12-16 01:00:28,364 INFO L158 Benchmark]: TraceAbstraction took 1605.05ms. Allocated memory was 107.0MB in the beginning and 134.2MB in the end (delta: 27.3MB). Free memory was 80.9MB in the beginning and 92.8MB in the end (delta: -11.9MB). Peak memory consumption was 33.1MB. Max. memory is 16.1GB. [2021-12-16 01:00:28,364 INFO L158 Benchmark]: Witness Printer took 65.32ms. Allocated memory is still 134.2MB. Free memory was 92.8MB in the beginning and 87.3MB in the end (delta: 5.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-16 01:00:28,366 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 88.1MB. Free memory was 44.8MB in the beginning and 44.8MB in the end (delta: 34.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 344.16ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 54.2MB in the beginning and 74.2MB in the end (delta: -20.0MB). Peak memory consumption was 7.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 44.35ms. Allocated memory is still 107.0MB. Free memory was 74.2MB in the beginning and 71.7MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.17ms. Allocated memory is still 107.0MB. Free memory was 71.7MB in the beginning and 70.1MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 366.61ms. Allocated memory is still 107.0MB. Free memory was 70.1MB in the beginning and 81.4MB in the end (delta: -11.2MB). Peak memory consumption was 19.1MB. Max. memory is 16.1GB. * TraceAbstraction took 1605.05ms. Allocated memory was 107.0MB in the beginning and 134.2MB in the end (delta: 27.3MB). Free memory was 80.9MB in the beginning and 92.8MB in the end (delta: -11.9MB). Peak memory consumption was 33.1MB. Max. memory is 16.1GB. * Witness Printer took 65.32ms. Allocated memory is still 134.2MB. Free memory was 92.8MB in the beginning and 87.3MB in the end (delta: 5.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 150]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 86 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.5s, OverallIterations: 5, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 292 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 284 mSDsluCounter, 765 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 377 mSDsCounter, 63 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 209 IncrementalHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 63 mSolverCounterUnsat, 388 mSDtfsCounter, 209 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 40 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=122occurred in iteration=4, InterpolantAutomatonStates: 24, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 5 MinimizatonAttempts, 22 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 279 PreInvPairs, 301 NumberOfFragments, 362 HoareAnnotationTreeSize, 279 FomulaSimplifications, 40 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 40 FomulaSimplificationsInter, 625 FormulaSimplificationTreeSizeReductionInter, 0.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.3s InterpolantComputationTime, 135 NumberOfCodeBlocks, 135 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 130 ConstructedInterpolants, 0 QuantifiedInterpolants, 278 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 5 InterpolantComputations, 5 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: ((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 1) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || !(systemActive == 1) - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: (splverifierCounter == 0 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 761]: Loop Invariant Derived loop invariant: ((((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 806]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || !(systemActive == 1) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 898]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 532]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || (tmp == 1 && \result == 1)) || !(systemActive == 1)) && (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 523]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || !(systemActive == 1) - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 146]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || !(systemActive == 1) - InvariantResult [Line: 602]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 RESULT: Ultimate proved your program to be correct! [2021-12-16 01:00:28,410 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE