./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product31.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product31.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7fffab71bdab4f0e8e57248febe72260063a133a0cb2741fe9829d7065610e52 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:08:52,364 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:08:52,366 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:08:52,390 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:08:52,390 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:08:52,391 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:08:52,392 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:08:52,393 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:08:52,394 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:08:52,395 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:08:52,395 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:08:52,396 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:08:52,396 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:08:52,397 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:08:52,398 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:08:52,399 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:08:52,399 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:08:52,400 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:08:52,401 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:08:52,402 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:08:52,403 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:08:52,420 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:08:52,421 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:08:52,421 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:08:52,423 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:08:52,423 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:08:52,423 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:08:52,424 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:08:52,424 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:08:52,425 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:08:52,425 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:08:52,425 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:08:52,426 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:08:52,426 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:08:52,427 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:08:52,427 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:08:52,427 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:08:52,428 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:08:52,428 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:08:52,428 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:08:52,429 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:08:52,430 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:08:52,455 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:08:52,459 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:08:52,460 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:08:52,460 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:08:52,461 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:08:52,461 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:08:52,462 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:08:52,462 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:08:52,462 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:08:52,462 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:08:52,463 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:08:52,463 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:08:52,463 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:08:52,463 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:08:52,463 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:08:52,463 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:08:52,464 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:08:52,464 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:08:52,464 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:08:52,464 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:08:52,464 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:08:52,464 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:08:52,465 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:08:52,465 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:08:52,465 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:08:52,465 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:08:52,465 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:08:52,466 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:08:52,467 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:08:52,467 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:08:52,467 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:08:52,467 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:08:52,467 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:08:52,468 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:08:52,468 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7fffab71bdab4f0e8e57248febe72260063a133a0cb2741fe9829d7065610e52 [2021-12-17 15:08:52,665 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:08:52,687 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:08:52,689 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:08:52,690 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:08:52,696 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:08:52,698 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product31.cil.c [2021-12-17 15:08:52,746 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8f16a7702/ded2674add8d4b4f8f72d71482208f2d/FLAGc6dcf3fc0 [2021-12-17 15:08:53,144 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:08:53,144 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product31.cil.c [2021-12-17 15:08:53,153 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8f16a7702/ded2674add8d4b4f8f72d71482208f2d/FLAGc6dcf3fc0 [2021-12-17 15:08:53,161 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8f16a7702/ded2674add8d4b4f8f72d71482208f2d [2021-12-17 15:08:53,163 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:08:53,164 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:08:53,171 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:08:53,171 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:08:53,176 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:08:53,177 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,178 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6e03502e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53, skipping insertion in model container [2021-12-17 15:08:53,178 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,182 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:08:53,232 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:08:53,464 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product31.cil.c[18328,18341] [2021-12-17 15:08:53,467 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:08:53,476 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:08:53,529 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product31.cil.c[18328,18341] [2021-12-17 15:08:53,529 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:08:53,540 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:08:53,545 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53 WrapperNode [2021-12-17 15:08:53,546 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:08:53,547 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:08:53,547 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:08:53,547 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:08:53,552 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,561 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,582 INFO L137 Inliner]: procedures = 55, calls = 157, calls flagged for inlining = 22, calls inlined = 18, statements flattened = 248 [2021-12-17 15:08:53,583 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:08:53,583 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:08:53,583 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:08:53,583 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:08:53,589 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,589 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,591 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,591 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,595 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,598 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,599 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,601 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:08:53,601 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:08:53,602 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:08:53,602 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:08:53,602 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (1/1) ... [2021-12-17 15:08:53,610 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:08:53,617 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:08:53,627 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:08:53,629 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:08:53,649 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:08:53,649 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:08:53,649 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:08:53,649 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:08:53,649 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:08:53,649 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:08:53,649 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:08:53,649 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:08:53,649 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:08:53,649 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:08:53,650 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:08:53,650 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-17 15:08:53,650 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-17 15:08:53,650 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:08:53,650 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:08:53,650 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:08:53,650 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:08:53,650 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:08:53,650 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:08:53,650 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:08:53,721 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:08:53,722 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:08:53,922 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:08:53,926 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:08:53,927 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:08:53,928 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:08:53 BoogieIcfgContainer [2021-12-17 15:08:53,928 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:08:53,929 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:08:53,929 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:08:53,932 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:08:53,932 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:08:53" (1/3) ... [2021-12-17 15:08:53,932 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6d2310d9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:08:53, skipping insertion in model container [2021-12-17 15:08:53,932 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:08:53" (2/3) ... [2021-12-17 15:08:53,933 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6d2310d9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:08:53, skipping insertion in model container [2021-12-17 15:08:53,933 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:08:53" (3/3) ... [2021-12-17 15:08:53,933 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product31.cil.c [2021-12-17 15:08:53,937 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:08:53,937 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:08:53,966 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:08:53,971 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:08:53,971 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:08:53,984 INFO L276 IsEmpty]: Start isEmpty. Operand has 90 states, 66 states have (on average 1.378787878787879) internal successors, (91), 75 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 10 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-17 15:08:53,987 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-12-17 15:08:53,987 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:08:53,988 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:08:53,988 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:08:53,991 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:08:53,992 INFO L85 PathProgramCache]: Analyzing trace with hash 751018144, now seen corresponding path program 1 times [2021-12-17 15:08:53,997 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:08:53,998 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253618471] [2021-12-17 15:08:53,998 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:08:53,998 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:08:54,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:54,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:08:54,178 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:08:54,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253618471] [2021-12-17 15:08:54,179 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253618471] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:08:54,180 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:08:54,180 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:08:54,181 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1445518111] [2021-12-17 15:08:54,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:08:54,185 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:08:54,186 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:08:54,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:08:54,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:08:54,213 INFO L87 Difference]: Start difference. First operand has 90 states, 66 states have (on average 1.378787878787879) internal successors, (91), 75 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 10 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:08:54,246 INFO L93 Difference]: Finished difference Result 172 states and 233 transitions. [2021-12-17 15:08:54,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:08:54,248 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-12-17 15:08:54,248 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:08:54,257 INFO L225 Difference]: With dead ends: 172 [2021-12-17 15:08:54,257 INFO L226 Difference]: Without dead ends: 81 [2021-12-17 15:08:54,260 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:08:54,263 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:08:54,264 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:08:54,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-17 15:08:54,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-17 15:08:54,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 59 states have (on average 1.305084745762712) internal successors, (77), 67 states have internal predecessors, (77), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:08:54,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2021-12-17 15:08:54,326 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 19 [2021-12-17 15:08:54,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:08:54,327 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2021-12-17 15:08:54,327 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,327 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2021-12-17 15:08:54,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2021-12-17 15:08:54,330 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:08:54,330 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:08:54,331 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:08:54,331 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:08:54,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:08:54,334 INFO L85 PathProgramCache]: Analyzing trace with hash -950488096, now seen corresponding path program 1 times [2021-12-17 15:08:54,334 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:08:54,335 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [908020259] [2021-12-17 15:08:54,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:08:54,335 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:08:54,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:54,409 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:08:54,410 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:08:54,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [908020259] [2021-12-17 15:08:54,410 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [908020259] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:08:54,410 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:08:54,410 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:08:54,411 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821487686] [2021-12-17 15:08:54,411 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:08:54,412 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:08:54,412 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:08:54,412 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:08:54,412 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:08:54,413 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:08:54,424 INFO L93 Difference]: Finished difference Result 124 states and 158 transitions. [2021-12-17 15:08:54,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:08:54,425 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2021-12-17 15:08:54,426 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:08:54,426 INFO L225 Difference]: With dead ends: 124 [2021-12-17 15:08:54,427 INFO L226 Difference]: Without dead ends: 72 [2021-12-17 15:08:54,428 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:08:54,429 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 16 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:08:54,431 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 161 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:08:54,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2021-12-17 15:08:54,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2021-12-17 15:08:54,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 53 states have (on average 1.320754716981132) internal successors, (70), 61 states have internal predecessors, (70), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 7 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-17 15:08:54,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 92 transitions. [2021-12-17 15:08:54,442 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 92 transitions. Word has length 20 [2021-12-17 15:08:54,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:08:54,443 INFO L470 AbstractCegarLoop]: Abstraction has 72 states and 92 transitions. [2021-12-17 15:08:54,444 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,444 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 92 transitions. [2021-12-17 15:08:54,445 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-17 15:08:54,445 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:08:54,445 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:08:54,446 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:08:54,446 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:08:54,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:08:54,446 INFO L85 PathProgramCache]: Analyzing trace with hash -1341231340, now seen corresponding path program 1 times [2021-12-17 15:08:54,446 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:08:54,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1725294716] [2021-12-17 15:08:54,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:08:54,447 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:08:54,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:54,503 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:08:54,503 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:08:54,503 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1725294716] [2021-12-17 15:08:54,504 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1725294716] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:08:54,504 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:08:54,504 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:08:54,505 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [874442520] [2021-12-17 15:08:54,505 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:08:54,506 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:08:54,506 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:08:54,507 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:08:54,507 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:08:54,507 INFO L87 Difference]: Start difference. First operand 72 states and 92 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:08:54,538 INFO L93 Difference]: Finished difference Result 201 states and 262 transitions. [2021-12-17 15:08:54,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:08:54,539 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-12-17 15:08:54,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:08:54,544 INFO L225 Difference]: With dead ends: 201 [2021-12-17 15:08:54,544 INFO L226 Difference]: Without dead ends: 136 [2021-12-17 15:08:54,545 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:08:54,546 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 72 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:08:54,548 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [72 Valid, 194 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:08:54,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2021-12-17 15:08:54,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 133. [2021-12-17 15:08:54,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133 states, 96 states have (on average 1.34375) internal successors, (129), 111 states have internal predecessors, (129), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 13 states have call predecessors, (22), 22 states have call successors, (22) [2021-12-17 15:08:54,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 173 transitions. [2021-12-17 15:08:54,568 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 173 transitions. Word has length 24 [2021-12-17 15:08:54,568 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:08:54,568 INFO L470 AbstractCegarLoop]: Abstraction has 133 states and 173 transitions. [2021-12-17 15:08:54,568 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,569 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 173 transitions. [2021-12-17 15:08:54,573 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2021-12-17 15:08:54,573 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:08:54,573 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:08:54,574 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:08:54,574 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:08:54,574 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:08:54,574 INFO L85 PathProgramCache]: Analyzing trace with hash -1307370678, now seen corresponding path program 1 times [2021-12-17 15:08:54,574 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:08:54,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597744479] [2021-12-17 15:08:54,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:08:54,575 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:08:54,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:54,638 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:08:54,638 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:08:54,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597744479] [2021-12-17 15:08:54,639 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597744479] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:08:54,639 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:08:54,639 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-17 15:08:54,639 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [193001627] [2021-12-17 15:08:54,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:08:54,639 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:08:54,639 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:08:54,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:08:54,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:08:54,640 INFO L87 Difference]: Start difference. First operand 133 states and 173 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:08:54,717 INFO L93 Difference]: Finished difference Result 373 states and 500 transitions. [2021-12-17 15:08:54,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:08:54,719 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2021-12-17 15:08:54,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:08:54,721 INFO L225 Difference]: With dead ends: 373 [2021-12-17 15:08:54,721 INFO L226 Difference]: Without dead ends: 247 [2021-12-17 15:08:54,722 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:08:54,722 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 64 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 372 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:08:54,723 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [64 Valid, 372 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:08:54,723 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 247 states. [2021-12-17 15:08:54,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 247 to 247. [2021-12-17 15:08:54,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 176 states have (on average 1.3295454545454546) internal successors, (234), 203 states have internal predecessors, (234), 44 states have call successors, (44), 28 states have call predecessors, (44), 26 states have return successors, (46), 24 states have call predecessors, (46), 44 states have call successors, (46) [2021-12-17 15:08:54,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 324 transitions. [2021-12-17 15:08:54,743 INFO L78 Accepts]: Start accepts. Automaton has 247 states and 324 transitions. Word has length 28 [2021-12-17 15:08:54,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:08:54,743 INFO L470 AbstractCegarLoop]: Abstraction has 247 states and 324 transitions. [2021-12-17 15:08:54,743 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,743 INFO L276 IsEmpty]: Start isEmpty. Operand 247 states and 324 transitions. [2021-12-17 15:08:54,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-17 15:08:54,744 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:08:54,744 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:08:54,744 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:08:54,744 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:08:54,745 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:08:54,745 INFO L85 PathProgramCache]: Analyzing trace with hash -983490225, now seen corresponding path program 1 times [2021-12-17 15:08:54,745 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:08:54,745 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1963988981] [2021-12-17 15:08:54,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:08:54,745 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:08:54,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:54,768 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:08:54,768 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:08:54,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1963988981] [2021-12-17 15:08:54,769 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1963988981] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:08:54,769 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:08:54,769 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:08:54,769 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1637003699] [2021-12-17 15:08:54,769 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:08:54,769 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:08:54,769 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:08:54,769 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:08:54,769 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:08:54,770 INFO L87 Difference]: Start difference. First operand 247 states and 324 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:08:54,784 INFO L93 Difference]: Finished difference Result 401 states and 533 transitions. [2021-12-17 15:08:54,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:08:54,784 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2021-12-17 15:08:54,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:08:54,785 INFO L225 Difference]: With dead ends: 401 [2021-12-17 15:08:54,785 INFO L226 Difference]: Without dead ends: 161 [2021-12-17 15:08:54,786 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:08:54,786 INFO L933 BasicCegarLoop]: 53 mSDtfsCounter, 38 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:08:54,787 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 53 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:08:54,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161 states. [2021-12-17 15:08:54,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161 to 159. [2021-12-17 15:08:54,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 120 states have (on average 1.2333333333333334) internal successors, (148), 127 states have internal predecessors, (148), 20 states have call successors, (20), 20 states have call predecessors, (20), 18 states have return successors, (20), 18 states have call predecessors, (20), 20 states have call successors, (20) [2021-12-17 15:08:54,814 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 188 transitions. [2021-12-17 15:08:54,814 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 188 transitions. Word has length 30 [2021-12-17 15:08:54,815 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:08:54,815 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 188 transitions. [2021-12-17 15:08:54,815 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,815 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 188 transitions. [2021-12-17 15:08:54,816 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:08:54,817 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:08:54,818 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:08:54,818 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:08:54,818 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:08:54,818 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:08:54,819 INFO L85 PathProgramCache]: Analyzing trace with hash 1611885872, now seen corresponding path program 1 times [2021-12-17 15:08:54,819 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:08:54,819 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [475866161] [2021-12-17 15:08:54,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:08:54,820 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:08:54,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:54,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:08:54,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:54,890 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:08:54,891 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:08:54,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [475866161] [2021-12-17 15:08:54,892 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [475866161] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:08:54,892 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:08:54,892 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:08:54,892 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1532087996] [2021-12-17 15:08:54,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:08:54,893 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:08:54,893 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:08:54,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:08:54,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:08:54,894 INFO L87 Difference]: Start difference. First operand 159 states and 188 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:08:54,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:08:54,975 INFO L93 Difference]: Finished difference Result 169 states and 198 transitions. [2021-12-17 15:08:54,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-17 15:08:54,976 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2021-12-17 15:08:54,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:08:54,976 INFO L225 Difference]: With dead ends: 169 [2021-12-17 15:08:54,976 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:08:54,977 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:08:54,977 INFO L933 BasicCegarLoop]: 49 mSDtfsCounter, 53 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:08:54,978 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [54 Valid, 154 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:08:54,978 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:08:54,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:08:54,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:54,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:08:54,978 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 32 [2021-12-17 15:08:54,978 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:08:54,978 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:08:54,979 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:08:54,979 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:08:54,979 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:08:54,981 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:08:54,981 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:08:54,982 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:08:55,370 INFO L861 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 832 839) the Hoare annotation is: true [2021-12-17 15:08:55,370 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 832 839) no Hoare annotation was computed. [2021-12-17 15:08:55,370 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 832 839) no Hoare annotation was computed. [2021-12-17 15:08:55,370 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 748 754) no Hoare annotation was computed. [2021-12-17 15:08:55,370 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 748 754) the Hoare annotation is: true [2021-12-17 15:08:55,371 INFO L858 garLoopResultBuilder]: For program point L590-1(lines 586 597) no Hoare annotation was computed. [2021-12-17 15:08:55,371 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 586 597) the Hoare annotation is: true [2021-12-17 15:08:55,371 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 586 597) no Hoare annotation was computed. [2021-12-17 15:08:55,371 INFO L858 garLoopResultBuilder]: For program point L944(lines 944 950) no Hoare annotation was computed. [2021-12-17 15:08:55,371 INFO L858 garLoopResultBuilder]: For program point L940(lines 940 953) no Hoare annotation was computed. [2021-12-17 15:08:55,371 INFO L854 garLoopResultBuilder]: At program point L940-1(lines 932 956) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~9#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse0))) [2021-12-17 15:08:55,371 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 724 747) no Hoare annotation was computed. [2021-12-17 15:08:55,371 INFO L854 garLoopResultBuilder]: At program point L796(line 796) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-17 15:08:55,371 INFO L854 garLoopResultBuilder]: At program point L635(lines 630 638) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= |old(~waterLevel~0)| 1)) (= |timeShift_getWaterLevel_#res#1| 1) .cse0) (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse0))) [2021-12-17 15:08:55,371 INFO L854 garLoopResultBuilder]: At program point L792(line 792) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-17 15:08:55,371 INFO L854 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-17 15:08:55,371 INFO L858 garLoopResultBuilder]: For program point L788-1(line 788) no Hoare annotation was computed. [2021-12-17 15:08:55,371 INFO L858 garLoopResultBuilder]: For program point L962(line 962) no Hoare annotation was computed. [2021-12-17 15:08:55,372 INFO L854 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) [2021-12-17 15:08:55,372 INFO L854 garLoopResultBuilder]: At program point L801-1(lines 782 806) the Hoare annotation is: (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) [2021-12-17 15:08:55,372 INFO L858 garLoopResultBuilder]: For program point L735-1(lines 735 741) no Hoare annotation was computed. [2021-12-17 15:08:55,372 INFO L858 garLoopResultBuilder]: For program point L566(lines 566 570) no Hoare annotation was computed. [2021-12-17 15:08:55,372 INFO L854 garLoopResultBuilder]: At program point L566-2(lines 562 573) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-17 15:08:55,372 INFO L854 garLoopResultBuilder]: At program point L963(lines 958 965) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-17 15:08:55,372 INFO L854 garLoopResultBuilder]: At program point L856(lines 851 859) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0) (or (and (= |timeShift_isPumpRunning_#res#1| 0) (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse0))) [2021-12-17 15:08:55,372 INFO L858 garLoopResultBuilder]: For program point L728-1(lines 727 746) no Hoare annotation was computed. [2021-12-17 15:08:55,372 INFO L858 garLoopResultBuilder]: For program point L790(lines 790 798) no Hoare annotation was computed. [2021-12-17 15:08:55,372 INFO L858 garLoopResultBuilder]: For program point L786(lines 786 803) no Hoare annotation was computed. [2021-12-17 15:08:55,372 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 724 747) the Hoare annotation is: (or (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) [2021-12-17 15:08:55,372 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 724 747) no Hoare annotation was computed. [2021-12-17 15:08:55,372 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 962) no Hoare annotation was computed. [2021-12-17 15:08:55,372 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-17 15:08:55,372 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-17 15:08:55,373 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-17 15:08:55,373 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-17 15:08:55,373 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-17 15:08:55,373 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-17 15:08:55,373 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-17 15:08:55,373 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-17 15:08:55,373 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-17 15:08:55,373 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-17 15:08:55,373 INFO L854 garLoopResultBuilder]: At program point L927(lines 915 929) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,373 INFO L854 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,373 INFO L858 garLoopResultBuilder]: For program point L696(lines 696 702) no Hoare annotation was computed. [2021-12-17 15:08:55,373 INFO L858 garLoopResultBuilder]: For program point L919(lines 919 925) no Hoare annotation was computed. [2021-12-17 15:08:55,373 INFO L858 garLoopResultBuilder]: For program point L919-1(lines 919 925) no Hoare annotation was computed. [2021-12-17 15:08:55,373 INFO L854 garLoopResultBuilder]: At program point L696-2(lines 690 703) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,373 INFO L854 garLoopResultBuilder]: At program point L176(lines 172 178) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,373 INFO L858 garLoopResultBuilder]: For program point L680(lines 680 686) no Hoare annotation was computed. [2021-12-17 15:08:55,373 INFO L858 garLoopResultBuilder]: For program point L680-1(lines 680 686) no Hoare annotation was computed. [2021-12-17 15:08:55,374 INFO L854 garLoopResultBuilder]: At program point L705(lines 660 707) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,374 INFO L854 garLoopResultBuilder]: At program point L672(line 672) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,374 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:08:55,374 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:08:55,374 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:08:55,374 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2021-12-17 15:08:55,374 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2021-12-17 15:08:55,374 INFO L854 garLoopResultBuilder]: At program point L169(lines 165 171) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,374 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:08:55,374 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2021-12-17 15:08:55,374 INFO L854 garLoopResultBuilder]: At program point L921(line 921) the Hoare annotation is: false [2021-12-17 15:08:55,374 INFO L858 garLoopResultBuilder]: For program point L661(lines 660 707) no Hoare annotation was computed. [2021-12-17 15:08:55,374 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2021-12-17 15:08:55,374 INFO L858 garLoopResultBuilder]: For program point L690(lines 690 703) no Hoare annotation was computed. [2021-12-17 15:08:55,374 INFO L854 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,374 INFO L861 garLoopResultBuilder]: At program point L711(lines 650 715) the Hoare annotation is: true [2021-12-17 15:08:55,374 INFO L858 garLoopResultBuilder]: For program point L670(lines 670 676) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point L670-1(lines 670 676) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point L662(lines 662 666) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,375 INFO L854 garLoopResultBuilder]: At program point L708(lines 659 709) the Hoare annotation is: false [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point L578-1(lines 574 585) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 574 585) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 574 585) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (= ~waterLevel~0 |old(~waterLevel~0)|)) [2021-12-17 15:08:55,375 INFO L854 garLoopResultBuilder]: At program point L766(line 766) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point L764(lines 764 772) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point L760(lines 760 777) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L854 garLoopResultBuilder]: At program point L911(lines 896 914) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point L905(lines 905 909) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point L905-2(lines 905 909) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L854 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point L775-1(lines 756 780) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 756 780) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2021-12-17 15:08:55,375 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 756 780) no Hoare annotation was computed. [2021-12-17 15:08:55,375 INFO L854 garLoopResultBuilder]: At program point L644(lines 639 647) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-17 15:08:55,376 INFO L854 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-17 15:08:55,376 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 840 850) the Hoare annotation is: true [2021-12-17 15:08:55,376 INFO L861 garLoopResultBuilder]: At program point L603(lines 598 606) the Hoare annotation is: true [2021-12-17 15:08:55,376 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 840 850) no Hoare annotation was computed. [2021-12-17 15:08:55,376 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 840 850) no Hoare annotation was computed. [2021-12-17 15:08:55,378 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2021-12-17 15:08:55,379 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:08:55,390 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:08:55 BoogieIcfgContainer [2021-12-17 15:08:55,390 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:08:55,390 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:08:55,390 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:08:55,390 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:08:55,391 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:08:53" (3/4) ... [2021-12-17 15:08:55,393 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:08:55,396 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:08:55,396 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:08:55,397 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:08:55,397 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:08:55,397 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:08:55,397 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:08:55,397 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:08:55,397 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-17 15:08:55,401 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-12-17 15:08:55,401 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:08:55,401 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:08:55,402 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:08:55,402 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:08:55,402 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:08:55,402 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:08:55,416 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2021-12-17 15:08:55,416 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0) [2021-12-17 15:08:55,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) && ((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) [2021-12-17 15:08:55,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || (tmp == 1 && \result == 1)) && ((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) [2021-12-17 15:08:55,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2021-12-17 15:08:55,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) && (((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) [2021-12-17 15:08:55,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2021-12-17 15:08:55,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2021-12-17 15:08:55,430 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:08:55,430 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:08:55,430 INFO L158 Benchmark]: Toolchain (without parser) took 2266.63ms. Allocated memory was 117.4MB in the beginning and 144.7MB in the end (delta: 27.3MB). Free memory was 85.1MB in the beginning and 67.5MB in the end (delta: 17.7MB). Peak memory consumption was 44.5MB. Max. memory is 16.1GB. [2021-12-17 15:08:55,430 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 81.8MB. Free memory was 39.9MB in the beginning and 39.8MB in the end (delta: 70.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:08:55,431 INFO L158 Benchmark]: CACSL2BoogieTranslator took 374.91ms. Allocated memory is still 117.4MB. Free memory was 85.1MB in the beginning and 85.3MB in the end (delta: -191.0kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:08:55,431 INFO L158 Benchmark]: Boogie Procedure Inliner took 36.14ms. Allocated memory is still 117.4MB. Free memory was 85.3MB in the beginning and 82.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:08:55,431 INFO L158 Benchmark]: Boogie Preprocessor took 17.70ms. Allocated memory is still 117.4MB. Free memory was 82.8MB in the beginning and 81.2MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:08:55,431 INFO L158 Benchmark]: RCFGBuilder took 326.58ms. Allocated memory is still 117.4MB. Free memory was 81.2MB in the beginning and 64.9MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-17 15:08:55,431 INFO L158 Benchmark]: TraceAbstraction took 1460.82ms. Allocated memory was 117.4MB in the beginning and 144.7MB in the end (delta: 27.3MB). Free memory was 64.4MB in the beginning and 73.7MB in the end (delta: -9.3MB). Peak memory consumption was 20.1MB. Max. memory is 16.1GB. [2021-12-17 15:08:55,432 INFO L158 Benchmark]: Witness Printer took 39.76ms. Allocated memory is still 144.7MB. Free memory was 73.7MB in the beginning and 67.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:08:55,433 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 81.8MB. Free memory was 39.9MB in the beginning and 39.8MB in the end (delta: 70.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 374.91ms. Allocated memory is still 117.4MB. Free memory was 85.1MB in the beginning and 85.3MB in the end (delta: -191.0kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 36.14ms. Allocated memory is still 117.4MB. Free memory was 85.3MB in the beginning and 82.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 17.70ms. Allocated memory is still 117.4MB. Free memory was 82.8MB in the beginning and 81.2MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 326.58ms. Allocated memory is still 117.4MB. Free memory was 81.2MB in the beginning and 64.9MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 1460.82ms. Allocated memory was 117.4MB in the beginning and 144.7MB in the end (delta: 27.3MB). Free memory was 64.4MB in the beginning and 73.7MB in the end (delta: -9.3MB). Peak memory consumption was 20.1MB. Max. memory is 16.1GB. * Witness Printer took 39.76ms. Allocated memory is still 144.7MB. Free memory was 73.7MB in the beginning and 67.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 962]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 90 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.4s, OverallIterations: 6, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 248 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 243 mSDsluCounter, 1047 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 532 mSDsCounter, 18 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 84 IncrementalHoareTripleChecker+Invalid, 102 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 18 mSolverCounterUnsat, 515 mSDtfsCounter, 84 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=247occurred in iteration=4, InterpolantAutomatonStates: 22, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 6 MinimizatonAttempts, 5 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 422 PreInvPairs, 464 NumberOfFragments, 265 HoareAnnotationTreeSize, 422 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 42 FomulaSimplificationsInter, 1171 FormulaSimplificationTreeSizeReductionInter, 0.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.3s InterpolantComputationTime, 153 NumberOfCodeBlocks, 153 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 147 ConstructedInterpolants, 0 QuantifiedInterpolants, 329 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: ((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) && ((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 639]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 660]: Loop Invariant Derived loop invariant: splverifierCounter == 0 && pumpRunning == 0 - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 650]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 659]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 562]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: splverifierCounter == 0 && pumpRunning == 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) && (((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 932]: Loop Invariant Derived loop invariant: ((!(\old(waterLevel) == 1) || !(\old(pumpRunning) == 0)) || (tmp == 1 && \result == 1)) && ((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (waterLevel == 1 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: (waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0) RESULT: Ultimate proved your program to be correct! [2021-12-17 15:08:55,460 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE